16405 matches found
Malicious code in @3stripes/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf6f6a1fb0e79c716386545df6b4a1e4df689bf6b35e741c28150cc3fad072a The package @3stripes/common was found to contain malicious code. Source: ossf-package-analysis...
SUSE SLES15 Security Update : qemu (SUSE-SU-2026:0889-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0889-1 advisory. This update for qemu fixes the following issue: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto bsc1255400. Tenable has...
Insertion of Sensitive Information into Log File
Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...
@oneuptime/cli (>=10.0.5, <=10.0.23) potentially affected by CVE-2026-32598 via @oneuptime/common (>=10.0.5, <=10.0.23)
@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.23 Source cves: CVE-2026-32598 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669612...
@oneuptime/cli (>=10.0.5, <=10.0.22) potentially affected by CVE-2026-32308 via @oneuptime/common (>=10.0.5, <=10.0.22)
@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.22 Source cves: CVE-2026-32308 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669623...
SQL Injection
Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...
@oneuptime/cli (>=10.0.5, <=10.0.22) potentially affected by CVE-2026-32306 via @oneuptime/common (>=10.0.5, <=10.0.22)
@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.22 Source cves: CVE-2026-32306 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669899...
CVE-2026-31885
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...
Malicious code in fusion-internal-common-drzak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a185377a78b169ac6bc30d82d4ba1031a1a2b7024e15a17ae5a2df8bc8fefc2 The package fusion-internal-common-drzak was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview fusion-internal-common-drzak is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2026-1397 Malicious code in fusion-internal-common-drzak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a185377a78b169ac6bc30d82d4ba1031a1a2b7024e15a17ae5a2df8bc8fefc2 The package fusion-internal-common-drzak was found to contain malicious code. Source: ghsa-malware...
CVE-2026-28793
creationtimestamp| type| source ---|---|--- 2026-03-12 17:32:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwm4hwro2n 2026-03-12 20:32:26+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2f24-mg4x-534q 2026-03-13 06:40:06+00:00| seen|...
Malicious code in b2b-common-cb-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0699be4242e2a015c76aad1b5ee1f2482f01a59017778511108ed33b8729a8e The package b2b-common-cb-lib was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview b2b-common-cb-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-27591
creationtimestamp| type| source ---|---|--- 2026-03-12 01:30:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213614461031957 2026-03-12 12:48:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgugq5rnq32h 2026-03-12 23:01:22+00:00| seen|...
ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2026-35536 via tornado (4.5.0)
tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2026-35536 Source advisory: OSV:GHSA-78CV-MQJ4-43F7...
CVE-2025-70024
An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14...
ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2026-31958 via tornado (4.5.0)
tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2026-31958 Source advisory: OSV:PYSEC-2026-140...
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-31826 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...
