28094 matches found
Malicious code in devplatform-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0fcdb30a4308ee477f432e1bcc665e8ee45f3dd36dd02f22089a4b9e2a69f9 [email protected] ships no ESLint configuration despite its name and description. Requiring the package loads compat.js, which on impo...
EUVD-2026-54262
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6...
Apple Security Advisory 07-27-2026-3
Apple Security Advisory 07-27-2026-3 - macOS Sequoia 15.7.8 addresses buffer overflow, bypass, code execution, denial of service, double free, heap corruption, information leakage, integer overflow, out of bounds read, out of bounds write, traversal, and use-after-free vulnerabilities...
Photon OS 5.0: Acl PHSA-2026-5.0-92-0946
An update of the acl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Python3 PHSA-2026-5.0-92-0945
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0945. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Cisco IOS XE Resource Exhaustion DoS
The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
Cisco IOS XE Privilege Escalation
The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
Cisco IOS XE Information Disclosure
The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
Cisco IOS XMCP DoS
The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2026-15733 WGDashboard Remote Code Execution vulnerability
A Remote Code Execution RCE vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root...
winxp-stack-buffer-overflow
Stack Buffer Overflow & Local Privilege Escalation Project...
MAL-2026-13408 Malicious code in @activepieces/piece-base44 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183bc897806f97f30cf26098efd5714de47475d007a7d5e23fe8fb05dbfe9df7 src/index.js requires childprocess and issues a ping command at line 16, with multiple POST calls at lines 13, 14, and 29 to hardcoded destinations...
ROOT-OS-ALPINE-323-CVE-2026-11824 CVE-2026-11824 in sqlite - Patched by Root
Root has patched CVE-2026-11824 in the sqlite package for Root:Alpine:3.23. Multiple fixed versions available...
Critical Photon OS Security Update - PHSA-2026-5.0-92-0946
Updates of 'libvirt', 'libxml2', 'runc', 'acl', 'perl' packages of Photon OS have been released...
sound/usb/mixer parse_audio_unit USB Audio
The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
F2FS File System Privilege Escalation
The vulnerability of the sbistore and f2fssbishow functions in the fs/f2fs/sysfs.c file of the F2FS file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...
OS Command injection
Impact PHPCodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code creating the Gitblame, Hgblame and Svnblame reports. As a result, running PHPCodeSniffer over untrusted files, for example, in a CI pipeline that scans pull requests, or on a developer...
GHSA-X52F-23V9-FG5G vulnerabilities
Vulnerabilities for packages: chromium...