203 matches found
amavis
Instalación Utilice el paquete amavis de su sistema si es posible. Requisitos previos Las dependencias de software se gestionan mediante Dist::Zilla. Algunas de ellas involucran bibliotecas de desarrollo que no son de perl y GCC como dependencia de compilación si se obtienen desde CPAN: libdb...
MAL-2026-17323 Malicious code in cortana-md-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2de4b6992a1dd7177803253b8c214d1ba7cc911cf0e1e7f800e1e9ff7ab5b1 cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five...
Malicious code in cortana-md-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2de4b6992a1dd7177803253b8c214d1ba7cc911cf0e1e7f800e1e9ff7ab5b1 cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five...
pdfjs-vuln-demo
PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...
pdfjs-vuln-demo
Proyecto de Demostración de Vulnerabilidad en PDF.js Este proyecto está pensado para servir como una prueba de concepto que demuestre la explotación de la vulnerabilidad en la biblioteca PDF.js pdfjs-dist reportada en CVE-2024-4367 Poner En Marcha Haz un fork y clona este repositorio npm install...
CVE-2026-54160
The Network UPS Tools (NUT) software contains a vulnerability in its GitHub Actions script used for the make-dist workflow. Due to a misconfiguration that mixed privileged code (a write-scoped GITHUB_TOKEN ) with untrusted inputs from PR source branches, a malicious pull request from a fork could...
CVE-2026-101079
The agentverus agentverus-scanner (up to version 0.8.1 ) contains a vulnerability in the isSecurityDefenseSkill function located in dist/scanner/analyzers/context.js . The root cause is the reliance on untrusted inputs during a security decision. Exploitation requires a local position to initiate...
EUVD-2026-88336
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
ROOT-APP-NPM-AIKIDO-2026-169371 AIKIDO-2026-169371 in pdfjs-dist - Patched by Root
Root has patched AIKIDO-2026-169371 in the pdfjs-dist package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-4367 CVE-2024-4367 in pdfjs-dist - Patched by Root
Root has patched CVE-2024-4367 in the pdfjs-dist package for Root:npm. Multiple fixed versions available...
amavis v2.15.0
Installation Use your system's amavis package if possible. Prerequisites Software dependencies are tracked via Dist::Zilla. Some of them involve non-perl development libraries and GCC as a build dependency if obtained from CPAN: libdb libidn2 libssl libzmq3 On Debian 13 for example, one can insta...
CVE-2026-82808: Use of Hard-coded Credentials
A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js of the component Google OAuth Client Secret. Such manipulation leads to hard-coded credentials. The attack can be execut...
CVE-2026-78638: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1432 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.1.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.1.1 and more Source cves:...
@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1432 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.1.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.1.1 and more Source cves:...
Cross-site Scripting (XSS)
Overview org.webjars.npm:pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript...
Cross-site Scripting (XSS)
Overview pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript code in the...
NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF vulnerability discovered by ? in WordPress Npm pdfjs-dist versions = 5.6.83, 6.2.108...