18998 matches found
SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:0950-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0950-1 advisory. This update for docker rebuilds it against the current go 1.25 security release. Tenable has extracted th...
Echo-Mate 安全漏洞
Echo-Mate is a desktop robot and AI assistant developed by Kingham Xu. Previous versions of Echo-Mate, including V250329, had security vulnerabilities that stemmed from the reuse of released components after their disposal...
PT-2026-27444
Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper enables nodeIntegration in the main BrowserWindow and does not restrict same-window navigations. An attacker who can place a link in...
Malicious Package
Overview coinbase-desktop-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CLSA-2026-1774277303 freerdp: Fix of CVE-2026-31806
CVE-2026-31806: Fix heap buffer overflow in nscprocessmessage...
March "In the Trend of VM" (#25): once again, vulnerabilities are only in Microsoft products
March "In the Trend of VM" 25: once again, vulnerabilities are only in Microsoft products. I present the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. As in February, it turned out to be quite compact and focused on a single vendor. 🗞 Post on Habr rus...
CVE-2026-32938
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the /api/lute/html2BlockDOM on the desktop copies local files pointed to by file:// links in pasted HTML into the workspace assets directory without validating paths against a sensitive-path list. Together with GET...
CVE-2026-32938 SiYuan has an Arbitrary File Read in its Desktop Publish Service
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the /api/lute/html2BlockDOM on the desktop copies local files pointed to by file:// links in pasted HTML into the workspace assets directory without validating paths against a sensitive-path list. Together with GET...
CVE-2026-32938 SiYuan has an Arbitrary File Read in its Desktop Publish Service
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the /api/lute/html2BlockDOM on the desktop copies local files pointed to by file:// links in pasted HTML into the workspace assets directory without validating paths against a sensitive-path list. Together with GET...
CVE-2026-32938 SiYuan has an Arbitrary File Read in its Desktop Publish Service
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the /api/lute/html2BlockDOM on the desktop copies local files pointed to by file:// links in pasted HTML into the workspace assets directory without validating paths against a sensitive-path list. Together with GET...
CVE-2026-32938
SiYuan desktop users running versions 3.6.0 and earlier are affected. The flaw in /api/lute/html2BlockDOM allows copying local files referenced by file:// links into the workspace assets directory without validating against a sensitive-path list. When combined with authenticated GET /assets/*path...
PT-2026-36256
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description A crash in the RDP protocol dissector allows for denial of service and possible code execution. Recommendations At the moment, there is no information...
USN-8105-2: FreeRDP regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attack...
Brave Desktop 1.88.134 Security Fixes
Fixed "Gate3" explorer URL validation to prevent XSS. Upgraded Chromium to 146.0.7680.153 — refer to Google Chrome advisories for inherited CVEs...
Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3199 (ALAS-2026-3199)
The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3199 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can...
MAL-2026-1855 Malicious code in ssf-desktop-api-specification (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b483f1c94deb76e7655d38cf4abdc31f984c39ed008ad293ea7614387704d3 The package ssf-desktop-api-specification was found to contain malicious code...
Malicious code in ssf-desktop-api-specification (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b483f1c94deb76e7655d38cf4abdc31f984c39ed008ad293ea7614387704d3 The package ssf-desktop-api-specification was found to contain malicious code...
Malicious code in ssf-desktop-api-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49396220b88ccf03b280b2ccbf09f84a3c871d1877ca7db06fd0e3fb78221305 The package ssf-desktop-api-electron was found to contain malicious code...
MAL-2026-1854 Malicious code in ssf-desktop-api-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49396220b88ccf03b280b2ccbf09f84a3c871d1877ca7db06fd0e3fb78221305 The package ssf-desktop-api-electron was found to contain malicious code...
MAL-2026-1693 Malicious code in coinbase-desktop-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acc3fd93737f0c91c26014273ad41b78393a11a3c9377a337636ce2ba558477 The package coinbase-desktop-sdk was found to contain malicious code...