15232 matches found
Malicious code in @moxfive-llc/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4880022b8afb155703691d80f8558c09be4262e4fa12064a2faca2607a3679b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @moxfive-llc/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-66402: Improper Certificate Validation
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
CVE-2026-54787
creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:23+00:00| seen|...
ROOT-APP-NPM-CVE-2024-29409 CVE-2024-29409 in @rootio/nestjs__common - Patched by Root
Root has patched CVE-2024-29409 in the @rootio/nestjscommon package for Root:npm. Multiple fixed versions available...
The vulnerability of the ucsi_notify_common() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...
UBUNTU-CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
Malicious code in @web3utils/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3a3a1b390694579fc5d75ee83e18f9b378d1206ae499c43c744c889d3fa862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11234 Malicious code in @web3utils/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3a3a1b390694579fc5d75ee83e18f9b378d1206ae499c43c744c889d3fa862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @web3utils/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @solana-utils/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @solana-utils/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abda158dfd80788df38b2221a5a9715eb7d6bebadb9569cfc51774985f39b0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11233 Malicious code in @web3-util/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6c5241d80dc8baa902550a561e37b238c483430f8c7b186abe033d11f8ea34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2026-49245
SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file downloads and authenticated user-file downloads suppresses Content-Disposition: attachment, allowing an attacker-controlled HTML file stored in a share or home...
Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
Summary image.download fetches a URL and writes the response to disk. It does not use the central path guard validatepathwithenvconfig, which confines writes to FLYTOSANDBOXDIR; instead it confines the output to outputdir, but outputdir is itself a caller parameter. Since the attacker sets both t...
CLEANSTART-2026-LX41243 Security fixes in terragrunt-fips 0.96.1-r0
Package terragrunt-fips version 0.96.1-r0 fixes 6 vulnerabilities: ghsa-fw7p-63qq-7hpr, ghsa-q9hv-hpm4-hj6x, ghsa-9h8m-3fm2-qjrq, CVE-2026-26958, CVE-2026-1229...
CLEANSTART-2026-WB27241 Security fixes in kor 0.5.9-r0
Package kor version 0.5.9-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...
CLEANSTART-2026-QQ61981 Security fixes in k8ssandra-client-fips 0.5.0-r9
Package k8ssandra-client-fips version 0.5.0-r9 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...