46460 matches found
Malicious code in @onereach/or-browser-next (npm)
npm/@onereach/or-browser-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11521 Malicious code in psbt-helpers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 82a309d768af6a39f95bb4f7c9f5d8548a95f0074613985f49f0513420dae9fa The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive...
Malicious code in psbt-helpers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 82a309d768af6a39f95bb4f7c9f5d8548a95f0074613985f49f0513420dae9fa The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive...
Malicious code in psbt-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40293a9b1851f25decc83d08f82fab01f1f373d95e13dc937575b7182d470720 psbt-utils presents itself as a PSBT/Bitcoin wallet signing library handling WIF and hex private keys. update.py contains a fetchanddecrypt loader th...
MAL-2026-11520 Malicious code in psbt-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40293a9b1851f25decc83d08f82fab01f1f373d95e13dc937575b7182d470720 psbt-utils presents itself as a PSBT/Bitcoin wallet signing library handling WIF and hex private keys. update.py contains a fetchanddecrypt loader th...
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
EUVD-2026-52526
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-66321
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66314
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Oracle Linux 10 : firefox (ELSA-2026-47101)
The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-47101 advisory. 140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...
CVE-2026-66325
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66311 Microsoft Edge (Chromium-based) Tampering Vulnerability
...
CVE-2026-66315
Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.
CVE-2026-66313
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66310
Microsoft Edge for Android is affected by CVE-2026-66310, described as external control of a file name or path that allows an unauthorized local attacker to disclose information. The vulnerability is labeled with CVSS v3.1 base score 7.7 (HIGH), with attack vector LOCAL, all else equal; no user i...
CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability
...
MAL-2026-11503 Malicious code in instalogin1234 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7d01985e4b5c4afe1e4aafc0eb9a3d97feb1eacae68ef70adf962846392460 The package presents itself as a 'Modern Instagram CLI' but its login command displays a fake Instagram login prompt that reads a username and passwo...
RLSA-2026:47178 Important: yelp security update
Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fixes: yelp: yelp-xsl: Overly Permissive Content Security Policy i...
