aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

Summary AWS CDK aws-cdk-lib is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. OS command injection issue in the NodejsFunction Docker bundling pipeline in aws-cdk-lib before 2.260.0 that might allow an actor who controls dependen...

GHSA-VCRF-J523-4MRF aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

Summary AWS CDK aws-cdk-lib is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. OS command injection issue in the NodejsFunction Docker bundling pipeline in aws-cdk-lib before 2.260.0 that might allow an actor who controls dependen...

Malicious code in richx (PyPI)

Source: kam193 924fa9cf3bc0754ab76a7b5960deb5b7295f4f0f3270cc5724214bdd7d543675 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in pygments-richstyle (PyPI)

Source: kam193 a965f61b1e51e6c96a8987633eaf2f23001320e4c6b884c33603230c66798e74 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in ggfmttygl (PyPI)

Source: kam193 e741cc1df48cc526ad3a27ac702f5dea403723557b4a485f84847340310d66e5 Package is disguised as a utility, but in fact loads encrypted code as modules. However, loading it requires knowing the decryption key which is not included in the package. --- Category: MALICIOUS - The campaign has...

Malicious code in ggfmttygl-new (PyPI)

Source: kam193 2098233a75602dd1779f720f566420f4a88ec77694b206e7858323b5aeea38d5 Package is disguised as a utility, but in fact loads encrypted code as modules. However, loading it requires knowing the decryption key which is not included in the package. --- Category: MALICIOUS - The campaign has...

Malicious code in chromifypro (PyPI)

Source: kam193 4138883ad2e38b4a8a4353918126f4732db5f04107be0bddafc745ec97120b52 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in asynhttp (PyPI)

Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in aiohttp-ssl (PyPI)

Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in aiohttp-openssl (PyPI)

Source: kam193 67b219a81e6b2dd7db78b4b223da914ee7baefd0ab056940d3af0bc3b47846a0 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

CVE-2026-16454

CVE-2026-16454 affects Eclipse hawkBit (DDI Controller)

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: zookeeper, ranger, apache-pulsar-fips, confluent-kafka-jre-bcfips, scala, apache-hop, zookeeper-fips, confluent-kafka, hadoop-client-modules, kafka, spark, pinot, apache-camel-karavan-devmode, apache-pulsar, apache-nifi, tez, spark-fips, druid, kafka-fips, hadoop-fip...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: zookeeper, ranger, apache-pulsar-fips, confluent-kafka-jre-bcfips, scala, apache-hop, zookeeper-fips, confluent-kafka, hadoop-client-modules, kafka, spark, pinot, apache-camel-karavan-devmode, apache-pulsar, apache-nifi, tez, spark-fips, druid, kafka-fips, hadoop-fip...

CVE-2026-9499

An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminated for example, one created with QByteArray::fromRawData, the codec-name matching routine reads past the end of the supplied buffer...

CVE-2026-60772: Improper Access Control

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60764: Improper Access Control

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62769

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials Common Modules versions 12.2.3 through 12.2.15 Description A flaw in the Common Components component allows a low privileged attacker with network access via HTTP to compromise the system. This can lea...

CVE-2026-60677: Improper Access Control

Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite component: Oracle Common Modules. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2026-63092: Missing Authorization

kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authenticated Kirby Panel user to retrieve the full plaintext commercial license key by sending a GET request to the modules/activate dialog endpoint. The plugin's activate dialo...

PT-2026-62115

kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authenticated Kirby Panel user to retrieve the full plaintext commercial license key by sending a GET request to the modules/activate dialog endpoint. The plugin's activate dialo...