Malicious code in ethers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b953533124edcc31e4293ed6bffe010e9110d795f812ba432de8b81d4d558 package.json declares a postinstall hook that base64-decodes the URL http://8.217.75.147:3000/payload, fetches it via curl over plain HTTP, and pipes...

MAL-2026-3707 Malicious code in ethers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b953533124edcc31e4293ed6bffe010e9110d795f812ba432de8b81d4d558 package.json declares a postinstall hook that base64-decodes the URL http://8.217.75.147:3000/payload, fetches it via curl over plain HTTP, and pipes...

Malicious code in web3-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e42f568897d9af194eb75275059455c99b369456b0c8e0ffe13e7f32be839e6 The OpenSSF Package Analysis project identified 'web3-common' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...

MAL-2026-3718 Malicious code in web3-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e42f568897d9af194eb75275059455c99b369456b0c8e0ffe13e7f32be839e6 The OpenSSF Package Analysis project identified 'web3-common' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

EUVD-2026-29667

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

com.googlecode.t7mp:maven-t7-common (>=0.9.10.m5, <=0.9.10.m6), com.googlecode.t7mp:maven-tomee-plugin (0.9.10.m3) +8 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.25)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common =0.9.10.m5, =0.9.10.m6 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.googlecode.t7mp:maven-t7-common (0.9.10.m1), com.googlecode.t7mp:maven-t7-plugin (>=0.9.1, <=0.9.10.m1) +12 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.0)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common 0.9.10.m1 - com.googlecode.t7mp:maven-t7-plugin =0.9.1,...

ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.9.0-m1, <=1.10.0-m5), ch.epfl.bluebrain.nexus:storage_2.13 (>=1.7.0, <=1.10.0-m5) +377 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.epfl.bluebrain.nexus:delta-app2.13 =1.9.0-m1, =1.7.0, =0.292, =0.292,...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.40)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =2.4, =2.5.3 Source cves:...

com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.6), net.myrrix:myrrix-web (1.0.0) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.cloudbees:cloudbees-web-container-extras =1.0.0, =1.0.6 - net.myrrix:myrrix-web 1.0.0 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.googlecode.t7mp:maven-t7-common (>=0.9.10.m5, <=0.9.10.m6), com.googlecode.t7mp:maven-tomee-plugin (0.9.10.m3) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.25)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common =0.9.10.m5, =0.9.10.m6 -...

CVE-2026-40397

CVE-2026-40397 describes an integer underflow (wrap/wraparound) in the Windows Common Log File System Driver that enables a locally authenticated attacker to elevate privileges. The description indicates a local, privileges-required (low), no user interaction vulnerability with high impact to con...

CVE-2026-40407 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2026-35433 .NET Elevation of Privilege Vulnerability

...

CVE-2026-34331

creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...