40113 matches found
EUVD-2026-71779
Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...
Improper Neutralization of Special Elements Used in a Template Engine
Overview awslabs.dynamodb-mcp-server is a The official MCP Server for interacting with AWS DynamoDB Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the CDK generator process. An attacker can execute arbitrary code on th...
SOC-Log-Monitoring-Threat-Detection-System
🛡️ SOC Log Monitoring & Threat Detection System !Javahttp...
CVE-2026-85654
Amazon awslabs.dynamodb-mcp-server contains a code injection vulnerability in its CDK generator component. The root cause is improper neutralization of special elements used in a template engine , allowing a context-dependent actor to execute arbitrary code on the host that deploys the generated ...
CVE-2026-85654 Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...
CVE-2026-85654
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...
CVE-2026-78658 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an formation disclosure vulnerability when processing...
vulnerabilities present in Google Chrome
Google has identified several vulnerabilities in Google Chrome, particularly in versions for 152.0.7977.82. These vulnerabilities reside in various components of Google Chrome, including DevTools, Network, V8 JavaScript engine, and Transactions Platform on iOS. Attackers can exploit these...
GHSA-V79C-CCH6-3849 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2FJV-4HM5-6J23 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8PJ6-X3R7-FGX3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P67G-9RGF-JJH6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-84MV-VQ26-WVMX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9QGH-MJ3F-5GW3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FV55-2P8J-MHM4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-994M-HVJJ-RV2C vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C76R-4QFW-4W98 vulnerabilities
Vulnerabilities for packages: chromium...
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...
Malicious Package
Overview wallet-engine-signing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Minor update for Vivaldi Desktop 8.2
Download Vivaldi The following improvements were made since the initial 8.2 stable release: CalendarSecurity Issue with malformed content VB-130988 Chromium Update to 152.0.7977.112 includes a fix for CVE-2026-85046 Type confusion in V8 SettingsSecurity Improve verification of user privacy settin...