193 matches found
Malicious code in @zalastax/nolb-eas- (npm)
The package @zalastax/nolb-eas- was found to contain malicious code. --- Credit: OpenSSF source...
Kingdee EAS - Local File Inclusion Detection
Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive server information. !/usr/bin/env python3 -- coding: utf-8 -- """Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive s.""" from...
lback-framework (>=0.1.0, <=1.0.1), ncalab (0.1.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.25.7)
protobuf PYPI version 4.25.7 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - lback-framework =0.1.0, =1.3.2, =0.27.0b1, =0.47.0b1, =1.0.0b1, =0.3.0b5, =0.37.0b1, =1.8.0b1 Source cves: CVE-2026-0994 Source advisory:...
SUSE CVE-2026-46155
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2compoundop If a server sends a truncated response but a large OutputBufferLength, and terminates the EA list early, checkwsleas returns success without validating that the entire...
DEBIAN-CVE-2026-31614
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in checkwsleas The bounds check uses u8 ea + nlen + 1 + vlen as the end of the EA name and value, but eadata sits at offset sizeofstruct smb2filefulleainfo = 8 from ea, not at offset 0. The...
CVE-2026-31614 smb: client: fix off-by-8 bounds check in check_wsl_eas()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in checkwsleas The bounds check uses u8 ea + nlen + 1 + vlen as the end of the EA name and value, but eadata sits at offset sizeofstruct smb2filefulleainfo = 8 from ea, not at offset 0. The...
CVE-2026-1906
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the wpoipsedisaveordercustomerpeppolidentifiers AJAX action due to missing capability checks and order ownership validation. This...
EUVD-2021-22287
Malware in sbrugna...
EUVD-2021-22319
Malware in sbrugna...
EUVD-2021-22289
Malware in sbrugna...
EUVD-2013-4585
Malware in sbrugna...
EUVD-2016-7515
Malware in sbrugna...
EUVD-2017-9786
Malware in sbrugna...
EUVD-2013-4583
Malware in sbrugna...
EUVD-2021-22290
Malware in sbrugna...
EUVD-2016-2032
Malware in sbrugna...
MAL-2025-11260 Malicious code in @zalastax/nolb-eas_ (npm)
The package @zalastax/nolb-eas was found to contain malicious code...
Malicious code in @zalastax/nolb-eas- (npm)
The package @zalastax/nolb-eas- was found to contain malicious code...