MAL-2026-17612 Malicious code in tx-broadcast-utils (RubyGems)

RubyGems runs this gem's native extension script ext/tx-broadcast-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2026-104809

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

CVE-2026-104809 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

CVE-2026-104809 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

SUSE-SU-2026:4442-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. - CVE-2026-88816: numeric value incorrectly treated as strings in FetchHashKeyName allows for process crash bsc1283056...

Security update for perl-DBI

This update for perl-DBI fixes the following issues: CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. CVE-2026-88816: numeric value incorrectly treated as strings in FetchHashKeyName allows for process crash bsc1283056. Patch...

Malicious code in ethereum-tx-helper (RubyGems)

RubyGems runs this gem's native extension script ext/ethereum-tx-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in typesens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ded39f31b2c2d4d73e0b576ab862c9ed90688153a43c359dae5b26854ad8738 package.json declares postinstall wscript.exe 4444.vbs, which runs automatically on npm install. The shipped 4444.vbs 765 KB contains a multi-layer...

MAL-2026-17565 Malicious code in typesens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ded39f31b2c2d4d73e0b576ab862c9ed90688153a43c359dae5b26854ad8738 package.json declares postinstall wscript.exe 4444.vbs, which runs automatically on npm install. The shipped 4444.vbs 765 KB contains a multi-layer...

CVE-2026-49933: Access of Uninitialized Pointer

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2026-106225

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to unlink without path traversal or directory...

PT-2026-106239

Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...

PT-2026-106228

Name of the Vulnerable Software and Affected Versions Newell Brands DYMO ID versions prior to 1.6.0 Description The software resolves its plugin Modules directory relative to the process working directory. This allows an attacker to store a job file alongside malicious modules or DLLs. When a...

PT-2026-106149

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth affected versions not specified Description An uninitialized pointer dereference in the handle le monitor device event function within msft.cc allows for a control-flow hijack in the privileged bluetooth process. This issue...

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the authentication procedures’ deficiencies, which allow a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

Malicious code in lite-matte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7b0ae9e42c334c1c22627e60add7a2c5a0d558a2ab65a3af0043e27bb0e686 package.json declares "postinstall": "wscript.exe 4444.vbs", causing npm install to auto-execute a 765KB Windows Script Host file shipped in the...

MAL-2026-17512 Malicious code in lite-matte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7b0ae9e42c334c1c22627e60add7a2c5a0d558a2ab65a3af0043e27bb0e686 package.json declares "postinstall": "wscript.exe 4444.vbs", causing npm install to auto-execute a 765KB Windows Script Host file shipped in the...

MAL-2026-17511 Malicious code in lite-mater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532663c4102d3cf7310e29ca1eb2b389c5c32c1e541da219b7c4364968f4e807 package.json declares a postinstall lifecycle hook wscript.exe 4444.vbs that runs automatically on npm install on Windows hosts. The shipped 4444.vbs...

Malicious code in studiocode_tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261d413c0847b530c9a452c209c25e0a7d9123f9b0f20b26d0afcc41a929c74a package.json declares a postinstall hook that runs wscript.exe 4444.vbs, auto-executing on npm install on Windows. The shipped 4444.vbs contains...