Malware in sme-crm-services-sme-crm-services-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2026-68157

Name of the Vulnerable Software and Affected Versions Fledge affected versions not specified Description The backup-restore upload handler upload backup located in python/fledge/services/core/api/backup restore.py is susceptible to OS command injection. The handler processes the first extracted t...

Malicious Package

Overview sme-crm-services-sme-crm-services-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

CVE-2026-46775

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data...

PT-2026-44533

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Core component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized...

Malicious code in com.unity.services.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570e09325b7eeead7439db1cd6a223b5de2ddab48982af7bb43957a6c48d9069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +101 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-common (2.5.5.final)

org.keycloak:keycloak-common MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-common and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +70 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (2.5.5.final)

org.keycloak:keycloak-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final,...