MAL-2026-4085 Malicious code in @antv/smart-color (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

CVE-2026-41506

A flaw was found in go-git, an extensible Git implementation library for Go. This vulnerability allows an attacker to potentially obtain sensitive HTTP authentication credentials. This can occur when go-git follows redirects during smart-HTTP clone and fetch operations, leading to the unintended...

WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hhhai in WordPress Plugin Smart Coupons for WooCommerce versions 2.3.0...

CVE-2026-41966

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41966

Technical details about CVE-2026-41966 are not publicly available in the provided documents. Monitor for updates from Huawei CVE references and NVD entries.

EUVD-2026-30528

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41966

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41966

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41966

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41966: Undefined Security Weakness

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-41287

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

WS-2019-0263

Smart-extend, in all versions, is vulnerable to Prototype Pollution. The deep function allowing attackers to modify the prototype of Object , hence causing the addition or modification of an existing property that will exist on all objects...

Akıllı E-Commerce Website SQL注入漏洞

Akıllı E-Commerce Website is an e-commerce website system developed by the Turkish company Akıllı, aimed at online retail and digital sales scenarios. Versions of Akıllı E-Commerce Website prior to 4.5.001 contained a SQL injection vulnerability. This vulnerability stemmed from improper...

smart-app-framework (>=2.4.0rc13, <=2.4.0rc14) potentially affected by CVE-2026-42304 via twisted (26.4.0rc2)

twisted PYPI version 26.4.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - smart-app-framework =2.4.0rc13, =2.4.0rc14 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

carml (19.1.0), nucypher (>=0.1.0a27, <=1.2.0b1) +3 more potentially affected by CVE-2026-42304 via twisted (19.7.0)

twisted PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml 19.1.0 - nucypher =0.1.0a27, =1.1.0, =1.0.0, =0.2.0, =0.2.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

CLSA-2026-1778674879 opensc: Fix of CVE-2024-45619

CVE-2024-45619: fix incorrect access of initialized parts of partially filled buffers triggered by crafted APDU responses from USB devices or smart cards...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...