The vulnerability of the pskCallback() and ALPNCallback() functions on the Node.js software platform allows a hacker to induce a service failure.

The vulnerability of the pskCallback and ALPNCallback functions on the Node.js software platform is related to improper cleanup or release of resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Microsoft Windows SMB Server Elevation of Privilege Vulnerability (CNVD-2026-10680)

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...

PT-2026-3443

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in hexpm hexpm/hexpm 'Elixir.HexpmWeb.SharedAuthorizationView' modules allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/hexpm web/views/shared...

The vulnerability of the clipboard management function in the terminal session of Windows Clipboard Server operating systems allows attackers to enhance their privileges.

The vulnerability of the clipboard management function in the terminal session of Windows Clipboard Server operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

OSV-2025-1061 Security exception in org.apache.poi.hssf.record.aggregates.SharedValueManager$SharedFormulaGroup.<ini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476431391 Crash type: Security exception Crash state: org.apache.poi.hssf.record.aggregates.SharedValueManager$SharedFormulaGroup. org.apache.poi.hssf.record.aggregates.SharedValueManager.create...

CVE-2026-22782

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

EUVD-2026-2923

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

CVE-2026-22782 RustFS RPC signature verification logs shared secret

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

GHSA-333V-68XH-8MMQ RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

Malicious code in @wbgo/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb329e935e8aeef2d3a86a6d85a8b57f76574d7e339b3d50c0504601b9e67e1 The package @wbgo/shared was found to contain malicious code. Source: ghsa-malware 98749f712baf86a5e8d0a6c22c6b6998a4decd916771550d27a31203104422f9 A...

EUVD-2026-3106

Malicious code in @spx-workforceops/shared-vue npm...

EUVD-2026-3103

Malicious code in @wbgo/shared npm...

Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2026-266 Malicious code in @wbgo/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb329e935e8aeef2d3a86a6d85a8b57f76574d7e339b3d50c0504601b9e67e1 The package @wbgo/shared was found to contain malicious code. Source: ghsa-malware 98749f712baf86a5e8d0a6c22c6b6998a4decd916771550d27a31203104422f9 A...

MAL-2026-263 Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

The vulnerability of the SMB Server component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the SMB Server component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Windows Kernel Memory component in operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Kernel Memory component in operating systems involves synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...