267258 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-63376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto,...
CVE-2026-79698
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
K000163225: Node.js vulnerability CVE-2026-59874
Security Advisory Description node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This...
CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
EUVD-2026-72264
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
CVE-2026-79698
A command injection vulnerability in the Node-RED Library component (function nodered_lib_apply) affects multiple Advantech WISE-6610 series industrial computers running firmware 1.2.1_20251110 . Manipulation of the act argument allows a remote attacker with low privileges to inject commands. The...
CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
CVE-2026-79698: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...
PT-2026-86635
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This vulnerability affects the...
Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)
Source: amazon-inspector 4cadb29ca45a130c2e649695523569350f25997d3168881e298d7c8c83e8863d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dynamic-import-node (npm)
Source: google-open-source-security e6f301178847664c047f34b5ce64b443f6162b3a0c5113fed22a3a9d1bfcd793 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on stealing npm, git, and other CI/CD related tokens. --- Credi...
Malicious code in draco-wasat-miranda-node-sass (npm)
Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-node-promised (npm)
Source: amazon-inspector df463afbbda6fbe8da01a353fbc7c385b9e136cb2315e85b08bf2af29947fe8c The package dotenv-node-promised was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dotenv-node-cli (npm)
Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dotenv-cli-node (npm)
Source: amazon-inspector 914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd The package dotenv-cli-node was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)
Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dione-spica-node-sass-puppeteer (npm)
Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dependencies-hugo-phenomic-node-config (npm)
Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dependencies-node-sass-arcturus-mini-css-extract-plugin (npm)
The package dependencies-node-sass-arcturus-mini-css-extract-plugin was found to contain malicious code. --- Credit: OpenSSF source...