MAL-2026-11600 Malicious code in @onereach/get-version-data (npm)

npm/@onereach/get-version-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

📄 Remote for Windows 2024.15 Desktop Stream Disclosure

Remote for Windows version 2024.15 has a vulnerability that allows any unauthenticated attacker to access a real-time H.264 stream of the victim’s Windows/Mac desktop. This is achieved by querying the /api/getVersion endpoint to retrieve the liveview.port, and then opening a TCP connection to tha...

D-Link DI-7003G Access Control Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /H5/getversion.data, which can be exploited by an attacker to cause information disclosure...

PT-2023-3347

Name of the Vulnerable Software and Affected Versions: Arcserve UDP versions 7.0 through 9.0.6034 Description: The issue allows authentication bypass, enabling an attacker to obtain a valid session and execute tasks as an administrator. This is achieved by exploiting the getVersionInfo method at...

UBUNTU-CVE-2020-20740

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdfgetversion...

PT-2020-15279

Name of the Vulnerable Software and Affected Versions PDFResurrect versions prior to 0.20 Description The issue is caused by a lack of header validation checks, leading to a heap-buffer-overflow in the pdf get version function. This can occur due to improper validation of PDF headers...