37 matches found
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-50400
CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
report-anonymizer
🛡️ Report Anonymizer Local LLM anonymizer for penetration-t...
Malicious Package
Overview @sbseg-plugin/qbo-web-app-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Split function. An attacker can cause excessive CPU consumption and resource exhaustion by supplying a malicious APK stream that triggers unbounded gzip inflation. Remediation...
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...
MAL-2025-48680 Malicious code in env-app (npm)
The package env-app was found to contain malicious code...
Malicious code in cross-app (npm)
The package cross-app was found to contain malicious code...
MAL-2025-42191 Malicious code in @bugtestester/simple-web-app-package (npm)
The package @bugtestester/simple-web-app-package was found to contain malicious code...
MAL-2025-42963 Malicious code in @tobiasredfield/simple-web-app-package (npm)
The package @tobiasredfield/simple-web-app-package was found to contain malicious code...
Malicious code in @tobiasredfield/simple-web-app-package (npm)
The package @tobiasredfield/simple-web-app-package was found to contain malicious code...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
MAL-2025-17470 Malicious code in config-app (npm)
The package config-app was found to contain malicious code...