Malicious Package

Overview sm-admin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in sm-admin (npm)

Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at http://16.192.173.5/sm-admin/pre and...

CVE-2026-55468: Improper Handling of Insufficient Permissions or Privileges

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in apifields without sufficient access control, allowing a user with Wagtail admin...

CVE-2026-78369: Missing Authentication for Critical Function

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...

PT-2026-80977

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description Multiple models contain a flaw in the setDevNet function where insufficient filtering of the username and password fields allows for command injection. A remote attacker with vali...

PT-2026-80938

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event code field is concatenated into a system command. A remote attacker can trigger this...

PT-2026-80923

Name of the Vulnerable Software and Affected Versions rConfig versions 8.0.0 through 8.2.12 Description An authentication bypass exists due to a duplicate Auth::routes call in the routes/web.php file, which inadvertently re-enables the POST /register endpoint after it had been disabled. This allo...

PT-2026-80974

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow occurs in the acl general setup Edit ACE function when the name field is copied into a fixed-size buffer without proper length validation. A remote attacker with...

PT-2026-79831

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description An unrestricted file upload issue exists in the save settings function within the admin class.php file. A remote attacker can exploit this by manipulating the img argument to upload arbitrary...

CVE-2026-78555: Insufficiently Protected Credentials

RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key, the full token was embedded in hidden form fields used by the enable/disable, private-access, and delete...

PT-2026-81015

Name of the Vulnerable Software and Affected Versions RansomLook affected versions not specified Description The authenticated /admin/apikeys administration page exposes complete API keys within the HTML source. While the user interface shows only a shortened version of the key, the full token is...

CVE-2026-78246: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

PT-2026-80998

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 24.0.0 Description A reflected cross-site scripting issue exists in the extra fields administration template. The type request parameter is echoed into an inline script block without proper JavaScript-context encodin...

EUVD-2026-64900

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

PT-2026-80966

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description Multiple models contain a directory traversal issue in the getSyslogFile function. This occurs due to insufficient validation of the option field, allowing a remote attacker with...

PT-2026-80942

Name of the Vulnerable Software and Affected Versions DrayTek VigorAP affected versions not specified Description A command injection issue exists in the mesh start speed test function. The flaw stems from insufficient sanitization of the meshdevice index and meshdevice ip variables before they a...

PT-2026-79830

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description A remote SQL injection is possible through the manipulation of the Username argument within the Login function of the admin class.php file. SQL injection is a technique where malicious SQL...

PT-2026-80801

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

PT-2026-80947

Name of the Vulnerable Software and Affected Versions DrayTek VigorAP affected versions not specified Description A command injection issue exists in the 'upload settings.cgi' interface. The flaw occurs due to insufficient filtering of the restorekey field before it is concatenated into a shell...