GO-2026-5848 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-3811 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2022-0344 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-5589 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

MAL-2026-14019 Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

CVE-2026-19016 vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2026-19012 vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...

CVE-2026-19771 Baicells EG3661M LuCI Web luci os command injection

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...

EUVD-2026-58564

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...

CVE-2026-19771

CVE-2026-19771 affects Baicells EG3661M with LuCI Web Interface (file /cgi-bin/luci). The vulnerability arises from manipulating the arguments MaxHops/Timeout/Size, enabling OS command injection. AttackVector is NETWORK with LOW complexity and none user interaction required; authenticated context...

SUSE CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

SUSE CVE-2026-73078

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu...

PT-2026-72120

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute code locally. Recommendations At the moment,...

PT-2026-71949

Name of the Vulnerable Software and Affected Versions Baicells EG3661M version BaiCE BQ6 2.0.5.3 NA Description An OS command injection flaw exists in the LuCI Web Interface component. A remote attacker can exploit this by manipulating the MaxHops, Timeout, or Size arguments within the...

PT-2026-72088

Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...