Malicious code in token-discord-encryptation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c8f046fd4903192eb3de371ca4df10734635758b721d7cf2827f9df6f84f0d The package token-discord-encryptation was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1155 Malicious code in rullzdigital-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfc2bce31260b9826f9f3040d958f28d0229e8db4f0d7bec9bd9404f86fc5a4 The package rullzdigital-libsignal was found to contain malicious code. Source: ghsa-malware...

Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

MAL-2026-1114 Malicious code in vitetest-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cbee8ebb202928d2c275d45908d490671a30db31920b98424c756a9a830ee2 The package vitetest-lint was found to contain malicious code. Source: ghsa-malware b3e0378c987c13cbf5c10bec3168e92580b7ed74b69325c32d255e391ba97137...

MAL-2026-1046 Malicious code in jest-param-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f5050070ee0637ff34403bfa22fe7464561a421a99410e084c74e1bd023b08 The package jest-param-validator was found to contain malicious code. Source: ghsa-malware...

VulnCheck KEV: CVE-2026-20931

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

Malicious code in locale-loader-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfe4223d443a4180a9c6113449817f38d1d72fcd6f2f4cb42525dcb391c82b5 The package locale-loader-pro was found to contain malicious code. Source: ghsa-malware...

CVE-2026-26360

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files...

CVE-2026-26361

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-20754

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files...

PT-2026-20755

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files...

PT-2026-20756

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Dell Unisphere for PowerMax 安全漏洞

Dell Unisphere for PowerMax is a graphical management platform developed by the American company Dell. Version 10.2 of Dell Unisphere for PowerMax contains a security vulnerability. This vulnerability stems from external control over file names or paths, which may lead to the overwriting of any...

External Control of File Name or Path

Overview nova is an OpenStack Nova provides a cloud computing fabric controller, supporting a wide variety of compute technologies, including: libvirt KVM, Xen, LXC and more, Hyper-V, VMware, XenServer, OpenStack Ironic and PowerVM. Affected versions of this package are vulnerable to External...

MAL-2026-881 Malicious code in contosoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1c09ad3c513e077cb24b54846b698e241643d6da17abdd97bf340d6c574eec The package contosoapp was found to contain malicious code. Source: ghsa-malware 71f7d3632ccf62f3b5b7098862038118adec5bb42ab6a16b36c0c384eaf4d582 Any...

Malicious code in pyright-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eaf8655e85afe77da4f3a06955a2b7e0885d5368c78190ea0a24ddea43e8f9c The package pyright-root was found to contain malicious code. Source: ghsa-malware 3727564f455a7e3bfbec445ea294c58fd47eec9abfa1dfd95f701b5462d7e176 A...

MAL-2026-891 Malicious code in wropz-6module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88cb695572ff176899ffcf9aed27987ea204493850e0bf4b17537d50b93dd59 The package wropz-6module was found to contain malicious code. Source: ghsa-malware 38cd1d5c8154310330369a075368b8556bcffed70470476c894f5d4feb1a2bae...

External Control of File Name or Path

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to External Control of File Name or Path via the model loading process when handling HDF5 files with external dataset references. An attacker can access arbitrary files and...

CVE-2026-21249

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally...

MAL-2026-835 Malicious code in sap-code-style-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13203a88392c91986f587e28ca25120b54f0c4d4ee5dd2c330c2bbbe6243203a The package sap-code-style-guides was found to contain malicious code. Source: ghsa-malware...