Malicious code in chai-as-constrained (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5f87c9fffb9b32d6390a3922c9a8bfc616a693910c9a8d7599cfa8ef11c9e9 The package chai-as-constrained was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-as-resolved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f68c4df2837821306981ccb732721f9d6a1be9a7f096d6adc0ea53cd922bfe6 The package chai-as-resolved was found to contain malicious code...

MAL-2026-1672 Malicious code in chai-as-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201c3097a1417370d6190e60489ac7894d63b574004eaa2b069958131ea2eda0 The package chai-as-sync was found to contain malicious code...

Malicious code in chai-as-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201c3097a1417370d6190e60489ac7894d63b574004eaa2b069958131ea2eda0 The package chai-as-sync was found to contain malicious code...

MAL-2026-1671 Malicious code in chai-as-resolved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f68c4df2837821306981ccb732721f9d6a1be9a7f096d6adc0ea53cd922bfe6 The package chai-as-resolved was found to contain malicious code...

Malicious code in chai-as-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d21e75438243773776319743f074531328a3b7c3a72438ca9d3fdcc7c2adb74 The package chai-as-prop was found to contain malicious code...

MAL-2026-1670 Malicious code in chai-as-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d21e75438243773776319743f074531328a3b7c3a72438ca9d3fdcc7c2adb74 The package chai-as-prop was found to contain malicious code...

MAL-2026-1669 Malicious code in chai-as-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b773fc994ff2fb27407b9ab4482deb4ab95bf5d772a226a80db73f0e0740b8b The package chai-as-prompt was found to contain malicious code...

Malicious code in chai-as-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b773fc994ff2fb27407b9ab4482deb4ab95bf5d772a226a80db73f0e0740b8b The package chai-as-prompt was found to contain malicious code...

MAL-2026-1668 Malicious code in chai-as-produced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8741712e4e467670d7233e9312dc417f809f4f3d3af0a48d31a9693ad1391067 The package chai-as-produced was found to contain malicious code...

Malicious code in chai-as-produced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8741712e4e467670d7233e9312dc417f809f4f3d3af0a48d31a9693ad1391067 The package chai-as-produced was found to contain malicious code...

Getting Roasted? Trellix Helix sees through AS-REP Attack

Getting Roasted? Trellix Helix sees through AS-REP Attack By Adithya Chandra and Maulik Maheta · March 17, 2026 Executive summary Threat actors regularly target Active Directory environments, continuously refining their toolsets and modifying attack frameworks to bypass security controls. However...

CVE-2026-30707

An issue was discovered in SpeedExam Online Examination System SaaS after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the Unmarshal, UnmarshalAsMap, UnmarshalAsArray, and Marshal functions, which invoke Decode. An attacker can cause a panic with truncated fixext data that triggers an out-of-bounds read. Note: This vulnerability i...

CVE-2026-32263 Craft CMS vulnerable to behavior injection RCE via EntryTypesController

Craft CMS is a content management system CMS. From version 5.6.0 to before version 5.9.11, in src/controllers/EntryTypesController.php, the $settings array from parsestr is passed directly to Craft::configure without Component::cleanseConfig. This allows injecting Yii2 behavior/event handlers via...

CVE-2016-20031

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

PT-2026-25804

Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.6.0 through 5.9.10 Description Craft CMS is a content management system. A flaw exists where the $settings array from parse str is passed directly to Craft::configure without proper sanitization using...

CVE-2016-20031

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...