36702 matches found
EUVD-2026-56374
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
Malicious code in bs58-12 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...
MAL-2026-13741 Malicious code in safe-local-env-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79536d7a1e4238fcad87abef5becbb3233148c071cae3c095798417a012896f8 safe-local-env-loader impersonates the legitimate dotenv package: its description, repository, homepage, and lib/main.js are copied from...
Malicious code in kit-vim-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916 The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x8664 ELF at dist/internal/calc-math.dat. The main...
MAL-2026-13740 Malicious code in kit-vim-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916 The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x8664 ELF at dist/internal/calc-math.dat. The main...
Remote Access API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
Remote Access API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
MAL-2026-13763 Malicious code in fetch-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5c49646ea7e22e74073aa7d8c9596d7d93100c429033383e975a2ab080de28 Package name is 'fetch-runtime' but the source is a copy of npm's 'make-fetch-happen' repository, README, and author metadata all reference...
Malicious code in lines-columns (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9abe51d09dfaa6a2e38e60df64038009c1029b34587cc2c8906d37642187cd Package name 'lines-columns' closely resembles the popular 'lines-and-columns' package, and the README instructs users to install 'lines-and-columns'...
Fake popular sites offer a free app, instead take over PCs
A website built to look almost exactly like CNN’s homepage is telling visitors to download "the new CNN app." But it's not CNN’s app, and has nothing to do with the news company. The campaign doesn’t stop at CNN. It also uses fake Stremio and Avast installers hosted on similarly convincing...
CVE-2026-73151
GHSA-x5r8-rq62-q9cj: remotetrx: unvalidated audio length + exposed transceiver control...
EUVD-2026-55925
Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data...
PT-2026-70366
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA affected versions not specified Cisco Secure Firewall Threat Defense FTD affected versions not specified Description Insufficient error checking when processing HTTP requests in the Remote...
PT-2026-70729
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an unauthorized attacker to execute arbitrary code locally or remotely,...
CVE-2026-20349: Improper Clearing of Heap Memory Before Release
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...
VulnCheck KEV: CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...