13640 matches found
MAL-2026-2335 Malicious code in azurestack-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500acb5021d6cc7c40146b6b6f8fd17563f17b68d95e52d78a749514b839cba3 The package azurestack-common was found to contain malicious code...
EUVD-2026-14776
CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11...
MAL-2026-2410 Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)
Malicious post-install script combined with low project popularity indicates potential malware. Arbitrary code execution is a major concern. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe31c5bb51c354ed83627a02c11ca4c8541e042623b1b987255941ffafdaff The...
CVE-2026-4755 CWE-20 in MolotovCherry Android-ImageMagick7
CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11...
Malicious code in yelp-mobile-site-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1d645e8b5f71c1d74bd3c213319d6674345796d462ed0e53a87c084f07a84 The package yelp-mobile-site-common was found to contain malicious code. Source: ghsa-malware...
MAL-2026-2123 Malicious code in yelp-mobile-site-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1d645e8b5f71c1d74bd3c213319d6674345796d462ed0e53a87c084f07a84 The package yelp-mobile-site-common was found to contain malicious code. Source: ghsa-malware...
OPENSUSE-SU-2026:10415-1 glances-common-4.5.2-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-27306
sbt 1.12.7 is released, featuring a security fix for CVE-2026-32948, Source dependency feature via crafted VCS URL leading to arbitrary code execution on Windows...
CVE-2026-3055
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...
Fedora: Security Advisory (FEDORA-2026-7ffd130a98)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
A Survey of Web Application Security Tutorials
Developers rely on online tutorials to learn web application security, but tutorial quality varies. We reviewed 132 free security tutorials to examine topic coverage, authorship, and technical depth. Our analysis shows that most tutorials come from vendors and emphasize high-level explanations ov...
Malicious code in @mesh-helpers/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7b29c037fd6e505ddbd1506f78292b2b69aef43c5750ef655bb27d5dd9986e The package @mesh-helpers/common was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-2021 Malicious code in @mesh-helpers/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7b29c037fd6e505ddbd1506f78292b2b69aef43c5750ef655bb27d5dd9986e The package @mesh-helpers/common was found to contain malicious code. Source: ossf-package-analysis...
GHSA-394X-VWMW-CRM3 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
CVE-2026-4505
creationtimestamp| type| source ---|---|--- 2026-03-20 19:16:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4505...
CVE-2026-4226
creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...
EUVD-2026-13598
A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...
CVE-2026-23273
In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlancommonnewlink error path valis reported that a race condition still happens after my prior patch. macvlancommonnewlink might have made @dev visible before detecting an error, and its...
