81 matches found
CVE-2026-10520
CVE-2026-10520 Ivanti Sentry formerly MobileIron Sentry is an enterprise security gateway that proxies traffic between mobile devices and corporate backend resources: email, SharePoint, and internal web applications. It enforces Mobile Device Management MDM policies, terminates encrypted mobile...
logitech-ipc-protocol
logitech-ipc-protocol Reverse-engineered documentation of the Logi Options+ agent IPC protocol. Enables programmatic control of Logitech multi-host devices host switching, device queries without raw HID access, on both macOS and Windows. The protocol has not been publicly documented before this...
Malicious code in internallib_v923 (npm)
Source: amazon-inspector 2d02d4c28dbcb2db331a6da7dba2476e3b7daf4f4d53d51d76d79ad4732d28a4 index.js exports a command function that shells out via /bin/bash -c to curl a payload from reverse-shell.sh and pipe it to sh, yielding a reverse shell to the hardcoded callback host 10.0.72.151:443. Any...
PYSEC-2026-4188
Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...
EUVD-2026-88696
Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...
CVE-2026-81930 Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain
Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...
CVE-2026-81930
The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...
PT-2026-102499
Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
EUVD-2026-72612
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
CVE-2026-19397: Missing Authentication for Critical Function
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
PT-2026-86974
Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...
Malicious code in btree-range-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7b5c5ccd56296e8ac25007af040c62f078c5953946fdae9fc1c67b0178f65f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in 3layerdipstackmu4bxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f47ca8b0e44e671faadd3d15253f3396ba78877392e9d4612cbe9d0e803cae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14980 Malicious code in 3layerdipstackx70bgg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862bd96242c9d0881543b13e5ff9672746a58a65da28390ab3741ea3a72a5bd3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14849 Malicious code in 3layerdipstacknuabm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f655e67b3f51bdf6c5a9a2eca4f079163b34c33a6524353ed9f6034d19bafa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 3layerdipstackr7ib9k (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e700d8fdf8a230a433bbf1fc3084c4a823335f7fbf4b2bca2ab54595564deed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...