1821 matches found
PT-2026-86077
Package kyverno-policy-reporter-kyverno-plugin-fips version 1.3.1-r6 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...
Netsweeper 4.0.8 - Directory Traversal Detection
A directory traversal vulnerability in webadmin/reporter/viewserverlog.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. dot dot in the log parameter in a stats action. !/usr/bin/env python3 -- coding: utf-8 --...
ZOHO ManageEngine Exchange Reporter Plus Panel - Detect
ZOHO ManageEngine Exchange Reporter Plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine Exchange Reporter Plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
Malicious Package
Overview pfa-autotests-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious code in zircuit-reporter (npm)
--- Credit: OpenSSF source...
Malicious Package
Overview jest-sync-json-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Linux Distros Unpatched Vulnerability : CVE-2026-64122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5etxreportertimeoutrecover mlx5etxreportertimeoutrecover...
CVE-2026-64122
In the Linux kernel, CVE-2026-64122 affects the mlx5e driver (net/mlx5e). The vulnerability is a use-after-free in mlx5e_tx_reporter_timeout_recover, where sq->netdev is accessed after mlx5e_safe_reopen_channels() tears down the channel and its embedded SQs. The fix replaces three sq->netde...
CVE-2026-64122
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5etxreportertimeoutrecover mlx5etxreportertimeoutrecover accesses sq-netdev after mlx5esafereopenchannels has torn down and freed the channel and its embedded SQs. Replace the three sq-netdev...
CVE-2026-64122
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5etxreportertimeoutrecover mlx5etxreportertimeoutrecover accesses sq-netdev after mlx5esafereopenchannels has torn down and freed the channel and its embedded SQs. Replace the three sq-netdev...
Malicious code in codestats_metrics-reporter (RubyGems)
--- Credit: OpenSSF source...
PYSEC-2026-2506 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
Summary GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs...
Malicious code in chain-guardian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c281292766d55cda3ff1b006154150aa05d567a4f8115534788ffbbc014f3e7 chain-guardian presents itself as a mocha gas reporter typosquatting eth-gas-reporter but its main entry index.js contains an always-true gate var op...
MAL-2026-10426 Malicious code in chai-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ffc5e8b4e25d2d7787eb9f3bb9607114e5e4290f0afe2350499b78d5f95642 [email protected] presents itself as a Mocha reporter mirroring the legitimate eth-gas-reporter project matching author name, README, and badges, but th...
Malicious code in chai-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ffc5e8b4e25d2d7787eb9f3bb9607114e5e4290f0afe2350499b78d5f95642 [email protected] presents itself as a Mocha reporter mirroring the legitimate eth-gas-reporter project matching author name, README, and badges, but th...
CLEANSTART-2026-LG10684 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r0
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
GHSA-V66X-68F2-PXF5 DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
Overview The Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation task operations. It is not restricted to any particular base path, meaning that any path writable by the DSpace often 'tomcat' user is allowed...
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
Overview The Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation task operations. It is not restricted to any particular base path, meaning that any path writable by the DSpace often 'tomcat' user is allowed...
Directory Traversal
Overview org.dspace:dspace-api is a DSpace core data model and service APIs. Affected versions of this package are vulnerable to Directory Traversal through the initCurator reporter output handling in dspace-api/src/main/java/org/dspace/curate/Curation.java. An attacker can overwrite or create...