CVE-2026-15720

Open5GS up to version 2.7.7 is affected by a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler, which may cause subscriber-wide denial of service. The CVE entry consolidates this as CVE-2026-15720. The connected sources (NVD/NVD CVE records) confirm the vulnera...

CVE-2026-15720 Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler

In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service...

CVE-2026-48978

A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a malicious registry or performing a man-in-the-middle attack, could exploit this to...

Malicious Package

Overview @emcd-vue/auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Exploit for CVE-2023-38646

cd /metabase-poc cat README.md -p 4444 -P 8000 -u http://loc...

MAL-2026-10518 Malicious code in chai-as-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12dffbf180eff9ea18e21c9fc8c514912e95e40b3439fc43c3e3124b7ed189a3 lib/initializeCaller.js contains a self-executing IIFE that POSTs the entire process.env object to a hardcoded remote endpoint and then executes the...

Malicious Package

Overview @idms-corp/auth-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2026-2643)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory: GHSA-8F6J-263M-G72X...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory:...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory: OSV:GHSA-8F6J-263M-G72X...

MAL-2026-10506 Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

NukeViet: Pre-authentication SSRF via X-Forwarded-Host

Summary An unauthenticated attacker can coerce the server into issuing HTTP requests to an attacker-chosen host by spoofing the X Forwarded-Host and X-Forwarded-Proto request headers. The forwarded host is used, without validation, to build the URL that serverinfoupdate fetches with cURL, resulti...

MAL-2026-10460 Malicious code in datavaultx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf831f155eb2a6d04427e5cc3cd239055844e80c3b02576a5d546e4e7ab42b6 On require of the package's main entry auth.js - lib/writer.js, the module attempts require'auth-gen-next'; on failure it invokes execSync'npm instal...

Malicious code in datavaultx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf831f155eb2a6d04427e5cc3cd239055844e80c3b02576a5d546e4e7ab42b6 On require of the package's main entry auth.js - lib/writer.js, the module attempts require'auth-gen-next'; on failure it invokes execSync'npm instal...

MAL-2026-10464 Malicious code in node-procmetrics-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev,...

Malicious code in node-procmetrics-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev,...

Aider is vulnerable to Code Injection via editor_coder.run function

A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-59245 Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)

In the Apache Airflow FAB auth manager, a DAG whose dagid is DAGs collided with the global all-DAGs permission resource name produced by resourcename, so a user granted per-DAG accesscontrol on that one DAG was silently granted the global all-DAGs permission privilege escalation. The escalation...