MAL-2026-14962 Malicious code in 3layerdipstackvkl1hd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b377c7fe1096a29a14d5b88a8976bffe545ab4fae10c8833cc53fd72c2f9a1f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14677 Malicious code in 3layerdipstack9nawzv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69be0b13e8c0686a5610a86df340163be1a4a20c3b23d823333512e165fc921b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14891 Malicious code in 3layerdipstackqjq77e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f320682123c83343a81c91e396664d2bd5a949a41ce07bffc822f83502648979 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14976 Malicious code in 3layerdipstackwudpnc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc4a9473451d1aa67c931cf613fea7d1d733fee91bc3858a9ff6de651c4ace The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack9gdxi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3f122cca9a4975d91aefb7515d935f02e2e69115a54f9576be92972272f656 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackryyay3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873039b8de9adf03f5e9bca4a4d16a82152226c59aaab549d11a578d084b5d57 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack5dfkei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b3c3d64b475cec5c69322b31b3e3bd9cba689f87cb9f878acde15f8dc7e8e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfourm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201726f590de9fa96f0aebe76a0fe1ad67a6ee5466a62a3eb5933f7655be1f4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14885 Malicious code in 3layerdipstackq4ek0f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d889748f378b114bb74220ed9ecf1dfbf2548c5126539fe997b409e201c4b23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14674 Malicious code in 3layerdipstack9gdxi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3f122cca9a4975d91aefb7515d935f02e2e69115a54f9576be92972272f656 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut

PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...

CVE-2025-49132

CVE-2025-49132 — RCE di Pterodactyl Strumento di exploit per CVE-2025-49132 — una vulnerabilità critica di esecuzione arbitraria di codice non autenticata che colpisce il pannello del server di gioco Pterodactyl. 🧠 Cos'è CVE-2025-49132 ? Una falla ACE critica nel pannello Pterodactyl che consente...

Malicious code in @fleetbo/svro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d86373813cd4d2b65edb11f6a3f352ad81a55e7de0444884f66b0adb482e661 The package ships two heavily obfuscated JavaScript files under dist/ — postinstall.cjs and cli.cjs — using hex-mangled identifiers 0x56260b, 0x12d64...

MAL-2026-14586 Malicious code in @fleetbo/svro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d86373813cd4d2b65edb11f6a3f352ad81a55e7de0444884f66b0adb482e661 The package ships two heavily obfuscated JavaScript files under dist/ — postinstall.cjs and cli.cjs — using hex-mangled identifiers 0x56260b, 0x12d64...

EUVD-2026-67288

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

EUVD-2026-67294

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

EUVD-2026-67328

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-76943

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

CVE-2026-75813

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...