MAL-2026-13411 Malicious code in @addai/node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca685518d56ea513609a2dfcd845bb14d94c3faaf58645553c688ca59817921 The package installs a background daemon dist/session-runner.js that pairs the host to a remote +Ai account and polls a hardcoded Supabase backend at...

n8n Session Interception

The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain control of the user account remotely...

EUVD-2025-27756

Malicious code in bioql PyPI...

Harmony Industrial PC Series Operational Data Exposure

The vulnerability of the system monitoring application in Harmony Industrial PCs of the HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to access user accounts remotely...

Ubuntu PAM Auth Bypass

The vulnerability of the PAM authentication mechanism for Authd in Ubuntu operating systems is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to another user’s account by executing commands like “su”, “sudo”...

PT-2018-18819

Name of the Vulnerable Software and Affected Versions HashiCorp Terraform Amazon Web Services AWS provider versions prior to v1.13.0, but since the exact fixed version is not specified, we consider versions prior to v1.12.0 as vulnerable, however the description only mentions through v1.12.0...

PT-2010-5590

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.4.12 Description The issue arises from the improper use of the PHP mt rand function by the my rand function in functions.php, making it easier for remote attackers to gain access to an arbitrary account. This can be...

PT-2008-1794 · Webportal · Webportal Cms

Name of the Vulnerable Software and Affected Versions: WebPortal CMS version 0.6-beta Description: The issue allows remote attackers to obtain access to any account via a lostpass action because the actions.php file in WebPortal CMS generates predictable passwords containing only the time of day...