2541472 matches found
MAL-2026-13936 Malicious code in datetime-format-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677f98dffacde20a42bef500b1e5d3e3b4b27bdcd11d7d74aa398730d6643b24 The package advertises itself as a date-format utility but ships a postinstall.js that runs automatically via scripts.postinstall on npm install. The...
Malicious code in datetime-format-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677f98dffacde20a42bef500b1e5d3e3b4b27bdcd11d7d74aa398730d6643b24 The package advertises itself as a date-format utility but ships a postinstall.js that runs automatically via scripts.postinstall on npm install. The...
Malicious code in datetime-fmt-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f916f6db3bec145472f71c43358b7e8056efb981041a3b4e9bffe8bbaec9997 The npm package's postinstall.js opens a TCP connection to the hardcoded IP 8.135.48.40 on port 4444 and pipes /bin/sh stdio through the socket,...
MAL-2026-13935 Malicious code in datetime-fmt-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f916f6db3bec145472f71c43358b7e8056efb981041a3b4e9bffe8bbaec9997 The npm package's postinstall.js opens a TCP connection to the hardcoded IP 8.135.48.40 on port 4444 and pipes /bin/sh stdio through the socket,...
CVE-2026-15994
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...
EUVD-2026-58061
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...
CVE-2026-15994
Technical details (affected product, versions, root cause, and exploit scenarios) are not publicly available in the provided documents. Monitor for updates from Lenovo and CVE/NVD records.
CVE-2026-15994
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63423
Technical details about CVE-2026-63423 are not publicly available in the provided documents. Monitor for updates from Lenovo and NVD; no affected products, vectors, or mitigations can be confirmed from the supplied sources.
EUVD-2026-58060
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63425
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63425
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63425
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...
EUVD-2026-58058
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63425
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-63426
CVE-2026-63426 concerns Lenovo Dock Manager. An authenticated local user can delete arbitrary files with elevated privileges due to a vulnerability described in the provided documents. CVSS metrics indicate a local, low-complexity condition with low privileges required and no user interaction, wi...