812 matches found
CVE-2026-90510: Use of Hard-coded Cryptographic Key
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
PT-2026-90829
Name of the Vulnerable Software and Affected Versions dromara orion-visor versions prior to 2.5.8 Description A remote attack is possible due to the use of a hard-coded cryptographic key within the encryptKey function of the HostKeyServiceImpl class. This issue allows for the potential compromise...
PT-2026-90828
Name of the Vulnerable Software and Affected Versions dromara orion-visor versions prior to 2.5.8 Description A remote manipulation of the ExposeApiAspect.beforeExposeApi function within the ExposeApiAspect.java file can lead to the exposure of hard-coded credentials. Recommendations At the momen...
CVE-2026-90509: Use of Hard-coded Credentials
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
htb-labs-orion
🚀 HTB Labs - Orion English | EspañolREADME-ES...
Exploit for CVE-2025-38900
Patch: CVE-2025-38900 Vulnerability Details - CVE: CVE...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73415 Source advisory:...
autoreduce-frontend (>=22.0.0.dev12, <=22.0.0.dev13), djangodjangodjango (4.0.1) +4 more potentially affected by CVE-2026-15307 via django (4.0.1)
django PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev12, =0.0.3, =1.2.1 - railguns 0.53.0 - shaarpy 0.3.0 - vuln-repo 0.0.4 Source cves: CVE-2026-15307 Source advisory:...
autoreduce-frontend (>=22.0.0.dev12, <=22.0.0.dev13), djangodjangodjango (4.0.1) +4 more potentially affected by CVE-2026-15830 via django (4.0.1)
django PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev12, =0.0.3, =1.2.1 - railguns 0.53.0 - shaarpy 0.3.0 - vuln-repo 0.0.4 Source cves: CVE-2026-15830 Source advisory:...
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credential...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73415 Source advisory:...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73626 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73626 Source advisory:...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-42557 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-42557 Source advisory:...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-40171 Source advisory:...
agentiacap (>=0.1.31, <=0.1.37), laclongagent (0.1.2) +4 more potentially affected by CVE-2026-26013 via langchain-core (0.3.41)
langchain-core PYPI version 0.3.41 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentiacap =0.1.31, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.4.post5 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2025-59842 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2025-59842 Source advisory:...
cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-67338 via jupyterlab (3.6.0rc1)
jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-67338 Source advisory:...
agentiacap (>=0.1.31, <=0.1.37), ap-rest-client (>=0.0.1, <=0.0.5) +7 more potentially affected by CVE-2026-48817 via starlette (0.46.0)
starlette PYPI version 0.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentiacap =0.1.31, =0.0.1, =1.107.2rc3, =1.0.1, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.4.7 Source cves: CVE-2026-48817 Source advisory:...
Malicious code in tw-theme-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...
MAL-2026-5935 Malicious code in tw-theme-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...