DJI多款产品 安全漏洞

DJI Spark, among others, are products of Chinese company DJI. DJI Spark is a super-lightweight foldable drone, similar to DJI Mavic Mini. DJI Mini SE is an entry-level drone. Several DJI products have security vulnerabilities, stemming from an authentication bypass in the Enhanced Wi-Fi Pairing...

EulerOS 2.0 SP13 : golang (EulerOS-SA-2026-1209)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse...

runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects

A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50029)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50029 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix UAF in...

MiracleLinux 4 : policycoreutils-2.0.83-30.1.AXS4 (AXSA:2016-915:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-915:02 advisory. Security-enhanced Linux is a feature of the Linux kernel and a number of utilities with enhanced security functionality designed to add mandatory access...

MiracleLinux 7 : fuse-2.9.2-11.el7 (AXSA:2019-3674:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3674:01 advisory. fuse: bypass of the userallowother restriction when SELinux is active CVE-2018-10906 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004182 advisory. A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002701 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Malicious code in chai-as-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb34c187e4750d1e5a6dc3c297a953d8089f054d74e4cac7667532d81b72ea8 The package chai-as-enhanced was found to contain malicious code. Source: ghsa-malware cb4ee9056898577e40bbef5e13e321597457852aa84f71886d4aef75898669...

Malicious Package

Overview chai-as-enhanced is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-239 Malicious code in chai-as-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb34c187e4750d1e5a6dc3c297a953d8089f054d74e4cac7667532d81b72ea8 The package chai-as-enhanced was found to contain malicious code. Source: ghsa-malware cb4ee9056898577e40bbef5e13e321597457852aa84f71886d4aef75898669...

EUVD-2026-2410

Malicious code in chai-as-enhanced npm...

CVE-2021-33961

A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...

CVE-2025-23946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Le-Pixel-Solitaire Enhanced YouTube Shortcode enhanced-youtube-shortcode allows Stored XSS.This issue affects Enhanced YouTube Shortcode: from n/a through = 2.0.1...

CVE-2025-23470

Cross-Site Request Forgery CSRF vulnerability in xavsio4 Visit Site Link enhanced visit-site-link-enhanced allows Stored XSS.This issue affects Visit Site Link enhanced: from n/a through = 1.0...

EUVD-2026-1419

vLLM introduced enhanced protection for CVE-2025-62164...

CVE-2024-2840

The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenticated attackers, with author-level...

WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin Media Search Enhanced versions = 0.9.1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000499 advisory. A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabl...

CVE-2025-14405

PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the targ...