CVE-2026-22908

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality...

CVE-2026-22908

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality...

EUVD-2026-2823

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality...

CVE-2026-22908

CVE-2026-22908 affects SICK TDC-X401GL (and related) via uploading unvalidated container images, enabling remote attackers to potentially gain full system access and impact confidentiality, integrity, and possibly availability. Root cause: unvalidated image upload. Exploitation status is not docu...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability, which stems from the upload of unverified container images. This vulnerability could allow remote attackers to gain full system access...

PT-2026-2989

Name of the Vulnerable Software and Affected Versions versions prior to 2026-22908 Description Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality. Recommendations At the moment, there is n...

PT-2026-2341

Name of the Vulnerable Software and Affected Versions SAP Application Server for ABAP and SAP NetWeaver RFCSDK affected versions not specified Description An authenticated attacker with administrative access and adjacent network access could potentially execute arbitrary operating system commands...

Malicious code in immer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc0710eb5a0ad9d9eb01cbd2d6f7c1b9cc39b07636d82a05f2cafdf953756bd The package immer-js was found to contain malicious code. Source: ghsa-malware 920c7d161c9e90ea35c168d53dd01e0920704e5f35e76d330fac6fb3c0a2cb87 Any...

Malicious code in gradle-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2250213d706eee1473dafe9b75172ac8e22adbf885bf28e4b2b85270de1ffbc8 The package gradle-plugin was found to contain malicious code. Source: ghsa-malware 0d6c8dc0207f1992c957598d80609ff61b750f041d94dde7984a3e0a6133d54e...

CVE-2023-25914

Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...

Malicious code in ncodeauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00fcaac77b28bc2ce7fd09837de2d46fd48c6bd32d11d39a98e2450d754843f The package ncodeauth was found to contain malicious code. Source: ghsa-malware 844237bb9b9aab92cf332246dacc9675c295acc85e6f914b9b9da957f04f7490 Any...

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances. The vulnerability, tracked as CVE-2026-21858 CVSS scor...

CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers...

Malicious code in @nestor_hexom/qyxb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0998609712e2df6e736e3da823279634b2cb874f692bba6f3ca65e452a4eb2a The package @nestorhexom/qyxb was found to contain malicious code. Source: ghsa-malware...

Malicious code in openblox-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f413a269bb13d7fc0f06d193b4b314762c1418948658dbcce7b416b6cc4e3d4 The package openblox-ts was found to contain malicious code. Source: ghsa-malware 60eca5ca78ef4e2c970e29512a0387609b154359d54bbc1a73473275777615c5 An...

Malicious code in bignumber.js-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c6e02327f14620207af4a5e1925c400b63593f1200b4741e6da6fbed98324b The package bignumber.js-new was found to contain malicious code. Source: ghsa-malware 28010a58702c96fe7985f5d14aa8012e5f51e93f658c9de605cbd3e7437e18...

Malicious code in @shop-cicd/webpack-package-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee6154f54d35f10e1bca4b64111deef6ab6c43c9ea291a7adfac091b7334ab0 The package @shop-cicd/webpack-package-artifact was found to contain malicious code. Source: ghsa-malware...

MAL-2026-66 Malicious code in redis-cookie-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c702113d5f2bf54eeb40b14947991242428d0d3fe07c09560ea2c10d953975f The package redis-cookie-js was found to contain malicious code. Source: ghsa-malware b7f1f65a70f0f5ed9257e64aa9d820766513adeb5a13fc8ac7ae11b9cf58d57...

MAL-2025-192964 Malicious code in @peter_wilson12091/internal-json-test-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18430304f650bf998b2421e45c0b8b01fce58239d3dd6fbe9de753128aac9a4d The package @peterwilson12091/internal-json-test-parser was found to contain malicious code. Source: ghsa-malware...

EUVD-2023-60249

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...