319344 matches found
MSC-2026-11456
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11462
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-80237
EFence , developed by Thinking Software Technology , suffers from an Arbitrary File Upload vulnerability. An authenticated remote attacker (low privileges) can upload and execute a web shell on the server, leading to arbitrary code execution with high impact on confidentiality, integrity, and ava...
CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
EUVD-2026-66345
Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...
CVE-2026-80236 Thinking Software Technology｜Efence - SQL Injection
Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...
CVE-2026-80235 Thinking Software Technology｜EFence - Arbitrary File Upload
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-80235 Thinking Software Technology｜EFence - Arbitrary File Upload
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
EUVD-2026-66344
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
The vulnerability of CIX Technology’s CIX8180 and CIX8160 processor microprogramming software lies in buffer overflow attacks in dynamic memory, allowing attackers to execute arbitrary code and bypass existing security mechanisms.
The vulnerability of the microprogramming software of CIX Technology’s CD8180 and CD8160 processors lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and bypass existing security mechanisms...
The Readout Protection protection mode of microprogramming software for microcontrollers from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, allows unauthorized access by intruders to the protected information.
The vulnerability of the Readout Protection protection mechanism in microprogramming software for microcontroller devices from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging...
CISA: Vulnerability Review for Fiscal Years 2024 and 2025
Most compromises do not rely on advanced techniques or cutting-edge tools. Cyber threat actors scan the internet looking for exposed, well-known software vulnerabilities to exploit. Basic security failures enable most compromises and organizations can reduce their risk by addressing these...
PYSEC-2026-3782
NVIDIA NemoClaw contains a vulnerability where an attacker could causeinsufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...
Malicious code in tailwind-scrollbar-hider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...
CVE-2026-16286
Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...
MINI-Q6G3-VWWG-7H47
Bulletin has no description...
CVE-2026-16286
CVE-2026-16286 is an unrestricted file upload vulnerability in TRtek Software Repository Management , allowing an unauthenticated attacker to upload a web shell to a web server. The flaw stems from insufficient validation of uploaded file types. Affected versions are those before commit 2fb4acee ...
EUVD-2026-65495
Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...