PT-2026-74565

TuxCare rebuilt ws to address 1 CVE. Fixed in 1.1.2-tuxcare.1...

PT-2026-73962

TuxCare rebuilt ws to address 1 CVE. Fixed in 7.4.6-tuxcare.1...

PT-2026-75534

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.18.0-tuxcare.1...

PT-2026-75516

TuxCare rebuilt ws to address 1 CVE. Fixed in 0.8.1-tuxcare.2...

PT-2026-75834

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.16.0-tuxcare.2...

PT-2026-75837

TuxCare rebuilt ws to address 1 CVE. Fixed in 7.5.9-tuxcare.2...

PT-2026-74088

TuxCare rebuilt ws to address 1 CVE. Fixed in 4.1.0-tuxcare.1...

PT-2026-75515

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.20.0-tuxcare.1...

PT-2026-75783

TuxCare rebuilt ws to address 1 CVE. Fixed in 6.2.1-tuxcare.1...

PT-2026-75700

TuxCare rebuilt ws to address 1 CVE. Fixed in 3.3.3-tuxcare.2...

PT-2026-75763

TuxCare rebuilt ws to address 1 CVE. Fixed in 1.1.1-tuxcare.2...

aiobotocore (>=0.4.0, <=0.4.1), async-patterns (0.2.0) +7 more potentially affected by CVE-2026-69244 via aiohttp (2.2.0)

aiohttp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiobotocore =0.4.0, =0.1.1, =0.2.2, =0.48.0, =0.4.1b2, =0.5.2b0, =0.1.0a88, =0.1.0b10 Source cves: CVE-2026-69244 Source advisory:...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-69244 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-69244 Source advisory: OSV:GHSA-CQ5V-8Q36-5273...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-69243 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-69243 Source advisory: OSV:GHSA-MFX4-HV73-Q22V...

ethereumd-proxy (>=0.1.2, <=0.3.0), homeassistant (>=0.49.0, <=0.50.2) +7 more potentially affected by CVE-2026-59881 via aiohttp (2.2.3)

aiohttp PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - ethereumd-proxy =0.1.2, =0.49.0, =0.4.4, =0.1.1, =0.1.4, =0.1.0, =0.4.1b17, =0.6.0b3, =0.1.0b11, =0.1.0b19 Source cves: CVE-2026-59881 Source...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-59881 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-59881 Source advisory: OSV:GHSA-MQ44-7P77-Q5H7...

Broadcast WS-Discovery

Sends a WS-Discovery Probe to 239.255.255.250:3702 and collects ProbeMatches NSE broadcast-wsdd-discover. !/usr/bin/env python3 -- coding: utf-8 -- """WS-Discovery multicast probe NSE broadcast-wsdd-discover.""" from kittysploit import from lib.scanner.broadcast.detectors import probebroadcastwsd...

WS FTP File Disclosure Detection

WS FTP file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """WS FTP file is disclosed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WS FTP File Disclosure Detection', 'description': 'WS FTP file is...

WS-FTP Ad Hoc Transfer Panel - Detect

WSFTP Ad Hoc panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP Ad Hoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WS-FTP Ad Hoc Transfer Panel - Detect', 'description':...

Malicious code in @gleamkit/ws (npm)

Source: amazon-inspector 8fc9213fe9e786988b3fd882b571f03aeaa1487b8006badb837b4e804da66eee The package publishes under scope @gleamkit/ws while copying the ws package's description, homepage, repository, author, and README verbatim, and bundling the legitimate ws source so it appears functional...