CVE-2026-76272: Missing Authorization

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk Secure Gateway does not verify that the user i...

Malicious code in boxy-sticky-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc08631cb79f90d5440020f420e9c7ad9e67ec84f25f085825c5b5f600f613a4 On require of the package, init.js downloads a platform-specific binary from Cloudflare Workers hosts whose names are reassembled at runtime from...

Exploit for Deserialization of Untrusted Data in Facebook React

React Server Components RCE – README Description React S...