CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787337364)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787337364 advisory. - A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or...

Malicious code in nebulaai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc906b81107141fbd85dcabf89fd2f5112c4e4a134045c90d6a35abb4b67d16e The package's preinstall.js contains a base64+zlib-encoded 257 KB Windows PE executable. On npm install on Windows, the script decodes the blob and...

MAL-2026-17227 Malicious code in nebula-llm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33da6aef41209f654f8f76cc56074a7b827599f42f941e3917326da1f4d2566 The npm package [email protected] ships a preinstall lifecycle script preinstall.cjs that embeds a 257KB Windows PE binary as a base64+zlib-compressed...

Malicious code in nebula-llm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33da6aef41209f654f8f76cc56074a7b827599f42f941e3917326da1f4d2566 The npm package [email protected] ships a preinstall lifecycle script preinstall.cjs that embeds a 257KB Windows PE binary as a base64+zlib-compressed...

CVE-2026-95958

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958

A security flaw exists in JusticeRage Manalyze 1.0.0 within the PE Parser component. Specifically, the PE::_parse_relocations function in the file manape/pe.cpp is vulnerable to an integer underflow triggered by manipulating the BlockSize argument. This vulnerability requires a local approach for...

EUVD-2026-85013

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

PT-2026-97150

Name of the Vulnerable Software and Affected Versions JusticeRage Manalyze version 1.0.0 Description A security flaw exists in the PE Parser component within the file manape/pe.cpp. A local attacker can cause an integer underflow—a condition where a subtraction results in a value smaller than the...

CVE-2026-95958: Integer Underflow (Wrap or Wraparound)

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

PT-2026-97424

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.3 Description An authorization bypass exists in the FileMaker Server Web Publishing Engine. By including a forged X-FMI-PE-ExtendedPrivilege header in a request, an attacker can bypass the disabled Custo...

EUVD-2026-83794

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

CVE-2026-94090

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

CVE-2026-94090 JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

CVE-2026-94090

JusticeRage Manalyze 1.0.0 contains an integer underflow in the PE Parser component, specifically in the function PE::_parse_debug within the file manape/pe.cpp . The flaw is triggered by manipulation of the misc.Length argument. The attack vector is remote with no privileges required , but user ...

CVE-2026-94090 JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

CVE-2026-94090 JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

PT-2026-96009

Name of the Vulnerable Software and Affected Versions JusticeRage Manalyze version 1.0.0 Description An integer underflow occurs in the PE Parser component within the PE:: parse debug function located in the manape/pe.cpp file. This issue can be triggered remotely by manipulating the misc.Length...