15960 matches found
MAL-2026-573 Malicious code in primebeem-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f1198676da63547b3cee3d253b405d8e3dede154ddbe5ea600ae12bd9f5d1 The package primebeem-db was found to contain malicious code. Source: ghsa-malware 12f10893865523e5ced704d651ea8f536db02fb4352114b3c243b7978e237254 A...
MAL-2026-555 Malicious code in acuitymobileapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...
Malicious code in cdnhost (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dacea96d573c773c7dab188922e5a1bd655ff37114ebcee7c23d1415bc4dc4ef The package cdnhost was found to contain malicious code. Source: ghsa-malware e0181f4fe287a7879047e64112250e5009c28564cf6017ad1d2f966e706da109 Any...
CVE-2026-24736 Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to define "Webhooks" as actions within the Rules engine. The url parameter in the webhook configuration does not appear to validate or restri...
CVE-2026-24736 Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to define "Webhooks" as actions within the Rules engine. The url parameter in the webhook configuration does not appear to validate or restri...
CVE-2026-24736
Squidex (up to 7.21.0) is vulnerable to a Server-Side Request Forgery (SSRF) in the Webhook configuration. The url parameter used by Rules engine webhooks does not validate destination IPs, allowing local addresses (e.g., 127.0.0.1, localhost). When a rule triggers, the backend makes an HTTP requ...
EUVD-2026-4839
n8n contains a critical Remote Code Execution RCE vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An...
CVE-2026-24810
A flaw was found in rethinkdb. Commonly known as a classic buffer overflow, the vulnerability allows a remote, unauthenticated attacker to provide specially crafted input. Successful exploitation can lead to arbitrary code execution, granting the attacker full control over the affected system...
CVE-2026-24345
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...
CVE-2026-24345
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...
CVE-2026-24345
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...
EUVD-2026-4822
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...
CVE-2026-24345 Cross-Site Request Forgery in EZCast Pro II Dongle
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...
MAL-2026-527 Malicious code in @santandergroup-uk/edgehome-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e512dc1f3fcaa6ef57a8b842e2f6afe53092e6b4dc6efa83f398b40c59e53a6b The package @santandergroup-uk/edgehome-components was found to contain malicious code. Source: ghsa-malware...
MAL-2026-534 Malicious code in internallib_v828 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1fe83e3d9c31b100d3117b436d62cb5bbed907b6393fd0ae603bd365e73889 The package internallibv828 was found to contain malicious code. Source: ghsa-malware d15fc740eb3e49fec4406761a411f74ba5e572f8ead9811783ba32b4417d0db...
Malicious code in pump.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b989d2f8fd56b43d56fd7cba25a48eaa37478729351505f297fc92fb125f697 The package pump.js was found to contain malicious code. Source: ghsa-malware 90ba9c17ff971763631161abd0a0b8dff35b945e9b81791ab4630ecf76af2185 Any...
Malicious code in morgan.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34775085e6638773de4ccac41092ae9954c9889f2c2a7bcd7cb7909375b53c4c The package morgan.js was found to contain malicious code. Source: ghsa-malware 6d6ee3da39907b410bc3a7d0baf6736a9c9c2f1c770a6e749c5ad2119c848d9f Any...
MAL-2026-545 Malicious code in testxhjhka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2b3af066bd5f02846fff50e2189f8c3a55cb62f71dd6835f4a999cd7dab42 The package testxhjhka was found to contain malicious code. Source: ghsa-malware 0552fa210ad2b24b0f9caf718edc7aed87d7cd7c610f380cf5348bd31b2fad70 Any...
MAL-2026-544 Malicious code in testxhjhk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bfad0315831fa5a60d77a9ea4bf705da5a42766326b6c7663fe3c56246eaf5 The package testxhjhk was found to contain malicious code. Source: ghsa-malware 6fec9c997770e337f9bb2f7aed6675ddc3c68769e5a3e134d5fb84e0e43944bf Any...
Malicious code in hiagentxhjrceme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817c81554dd53439cd7598a86165d6d0668444ead8912fb3cc0d4e0a96d35a93 The package hiagentxhjrceme was found to contain malicious code. Source: ghsa-malware 294835f0eba279be35d5f1d7cf834eba2af68a7f16e0b5730d79debc1245d83...