CVE-2026-22229

A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...

Exploit for CVE-2025-60865

CVE Disclosures | Findings...

CVE-2026-1453

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

CVE-2026-1453 Missing Authentication for Critical Function in KiloView Encoder Series

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

CVE-2026-1453

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

KiloView Encoder Series Access Control Vulnerability

The KiloView Encoder Series is a series of electronic encoders developed by the British company KiloView. The KiloView Encoder Series contains an access control vulnerability; this vulnerability stems from the lack of authentication for critical functions. This allows unauthorized attackers to...

CVE-2026-24810

A flaw was found in rethinkdb. Commonly known as a classic buffer overflow, the vulnerability allows a remote, unauthenticated attacker to provide specially crafted input. Successful exploitation can lead to arbitrary code execution, granting the attacker full control over the affected system...

Malicious code in pump.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b989d2f8fd56b43d56fd7cba25a48eaa37478729351505f297fc92fb125f697 The package pump.js was found to contain malicious code. Source: ghsa-malware 90ba9c17ff971763631161abd0a0b8dff35b945e9b81791ab4630ecf76af2185 Any...

MAL-2026-544 Malicious code in testxhjhk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bfad0315831fa5a60d77a9ea4bf705da5a42766326b6c7663fe3c56246eaf5 The package testxhjhk was found to contain malicious code. Source: ghsa-malware 6fec9c997770e337f9bb2f7aed6675ddc3c68769e5a3e134d5fb84e0e43944bf Any...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

CVE-2025-59097

The CVE-2025-59097 issue affects the dormakaba exos 9300 configuration GUI used to push configurations to Access Managers (e.g., 92xx, 9230, 9290). When the user saves a configuration, the SOAP payload is sent to the selected Access Manager without authentication or authorization by default. Whil...

MAL-2026-465 Malicious code in @ikeacn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cac48e6bd5a0c800a2b821dafa52f34ae61a0592089305f0f308b264390b0 The package @ikeacn/utils was found to contain malicious code. Source: ghsa-malware 25e3e51050a140b96f55be4f132f695cd77cf380a7a0dea9e48bde3b5064df7c...

Malicious code in @mailpoet/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec1e0266ccd0888d11f208447e31b521c1d6a2d7e622b0b78d7572b5f6e8b3e The package @mailpoet/components was found to contain malicious code. Source: ghsa-malware...

MAL-2026-409 Malicious code in chai-async-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d513c8edc24de9b9993282b15030364ac655c161954965840f5a8d630470cef1 The package chai-async-test was found to contain malicious code. Source: ghsa-malware 44653d8509702f49ad07480d256afe34186fa1f3920fca7b95d57ef1f7ed855...

Malicious code in replicate-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84c6cb090eb31f1b2c516b45419d7833bca83f5546d22444032d28a07d27f40 The package replicate-js was found to contain malicious code. Source: ghsa-malware 658bf1d6aa22bb672e5ae9724e34b94ee7ff73e7cd4381ff4a6a8c9c2d1267fa A...

MAL-2026-426 Malicious code in qdrant-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad84f3d1657583a0a6fa9d58b06258298369ea5e4ee10ac0516c3f641b33871 The package qdrant-js was found to contain malicious code. Source: ghsa-malware 789e158c461e8c11f86da5b04f09dab1797536199084bf548efc2f3ee13b33f1 Any...

Malicious code in collaborate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbe8909025711e34022d8c3556eac89c554324e133deb4b5fea65acbc33ef6 The package collaborate was found to contain malicious code. Source: ghsa-malware 4497ac6f05c2ec9a7b4b2328613c2fe85d955300a510ecaca8427c13d952a217 An...

Malicious code in kanban-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3c671a99b49533fbfeaf2dd948f86f14d82ee338f622af22283b774159881f The package kanban-webcomponent was found to contain malicious code. Source: ghsa-malware...

Malicious code in internallib_v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c291455afc990d6ae2ac49fa20ae7607e6da1a60e5d2ab5d745cfb065c6ca6c8 The package internallibv325 was found to contain malicious code. Source: ghsa-malware d5dedf497ea370ca0df69bffd7fd034f3df7e6dfd866e69f3ace19487df89c1...

Malicious code in chai-chain-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3340d37485bf0cbe47f2378b96588e8afadc83635bef93d108730ea72ab8f78 The package chai-chain-async was found to contain malicious code. Source: ghsa-malware a3404961b3edc416f501bf5ec175f0bbb95a188e9f1210305c9e37783e6265...