15963 matches found
MAL-2026-741 Malicious code in confluence-analytics-support (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce55572584393fb9c1af657085c599ab0f699fd5bf4bfbcda2a47560c6a717c The package confluence-analytics-support was found to contain malicious code. Source: ghsa-malware...
Malicious code in confluence-analytics-support (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce55572584393fb9c1af657085c599ab0f699fd5bf4bfbcda2a47560c6a717c The package confluence-analytics-support was found to contain malicious code. Source: ghsa-malware...
MAL-2026-730 Malicious code in zappr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1d1ba299d9e9b09804199d01b8da2e7f28c9305d8880ed49177a01e9d094f3 The package zappr was found to contain malicious code. Source: ghsa-malware c770ad9e96af96c9a3d81bf160dcb48c4d3b4e16e5dc6e717e7161d8e3ab420f Any...
Malicious code in dotenv-embedded (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a4c23212d813ad58db347e1a5a152b003e1085b18036f047755d05de52fe0b The package dotenv-embedded was found to contain malicious code. Source: ghsa-malware bf0cfff747361e3a51fbd35f3018e05312b4bd030890362b89821789ab2adb5...
MAL-2026-713 Malicious code in react-sdkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be5e5cc941dec9a36d78d9de45e31cd604e0efacd37d1b78b62e452689b2cb7 The package react-sdkk was found to contain malicious code. Source: ghsa-malware 60e38e54e0f061a0da679900787b26c8949e350345b5ae5e12688321574bd4c7 Any...
MAL-2026-714 Malicious code in reactt-sdkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1040004e57d22b532a81d886c4a8d7847ea79a24950a31bc092da3f8ff0e46b The package reactt-sdkk was found to contain malicious code. Source: ghsa-malware 56b1676235be8d72d317cee06957d2c7c8b4a3e8fd215927e13b76fdcfe44384 An...
MAL-2026-711 Malicious code in mongoose_update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91df51d75c82831870e737a45d083f0f75a4efd3fa5446b0c07a5c8c9ad910fd The package mongooseupdate was found to contain malicious code. Source: ghsa-malware c8c705834895c7083b2f00f874d9761f360f0208ee61aaeec6af5c2a806841e5...
MAL-2026-715 Malicious code in rreact-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545745c49f65687bb4f76d176081253cf22e6a0400a6ef46167d730b2c6bc5af The package rreact-sdk was found to contain malicious code. Source: ghsa-malware 20062321714f0ca22d7f2eb77967ff272ade6afac544812eaeacd15b918dbc11 Any...
OSV-2026-190 Security exception in com.ctc.wstx.util.TextBuffer.buildResultArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=480987597 Crash type: Security exception Crash state: com.ctc.wstx.util.TextBuffer.buildResultArray com.ctc.wstx.util.TextBuffer.contentsAsArray com.ctc.wstx.dtd.FullDTDReader.parseEntityValue...
CVE-2026-22226
A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe...
CVE-2026-22222
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2web modules allows adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration...
CVE-2026-22225
A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...
CVE-2025-10878
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
CVE-2025-10878
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
FUXA allows Remote Code Execution (RCE) via the project import functionality.
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
CVE-2025-69431
The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...
CVE-2020-37116
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise...
MAL-2026-706 Malicious code in @devgandhi/healthpulse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a052fcc97593bfdb07bb6a57d80e8a3eac89d20d8ac264748408de1724cdf0 The package @devgandhi/healthpulse was found to contain malicious code. Source: ghsa-malware...
Malicious code in @devgandhi/healthpulse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a052fcc97593bfdb07bb6a57d80e8a3eac89d20d8ac264748408de1724cdf0 The package @devgandhi/healthpulse was found to contain malicious code. Source: ghsa-malware...