CVE-2026-2809 Endpoint DLP Driver DLL

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

PT-2026-25943

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

Netskope Endpoint DLP Module 安全漏洞

The Netskope Endpoint DLP Module is a data loss protection module developed by the American company Netskope for endpoint devices. The Netskope Endpoint DLP Module has a security vulnerability, which stems from integer overflow in the DLL injector. This vulnerability could allow privileged users ...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: zellij, pixi, geckodriver, deno, zola, shadowsocks-rust, yazi, sdp-k8s-injector, wash, parseable, zizmor, cargo-c, samply, lychee, sccache, uv, wasmtime, zed, berg, wasmcloud, linkerd2, mdbook, rustup, tealdeer, oranda, sqlx, buck2, kdash, qdrant, atuin, wizer, helix...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: zellij, pixi, geckodriver, deno, zola, shadowsocks-rust, yazi, sdp-k8s-injector, wash, parseable, zizmor, cargo-c, samply, lychee, sccache, uv, wasmtime, zed, berg, wasmcloud, linkerd2, mdbook, rustup, tealdeer, oranda, sqlx, buck2, kdash, qdrant, atuin, wizer, helix...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: kdash, komodo, qdrant, sdp-k8s-injector, shadowsocks-rust, wizer, sqlx, zed, linkerd-network-validator, linkerd2-cni-plugin, helix, tealdeer, wadm, parseable, lychee, valkey-ldap, wasmtime, jujutsu, netavark, cargo-audit, linkerd-extension-init, nushell, asciinema,...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: kdash, komodo, qdrant, sdp-k8s-injector, shadowsocks-rust, wizer, sqlx, zed, linkerd-network-validator, linkerd2-cni-plugin, helix, tealdeer, wadm, parseable, lychee, valkey-ldap, wasmtime, jujutsu, netavark, cargo-audit, linkerd-extension-init, nushell, asciinema,...

CVE-2025-23483

Cross-Site Request Forgery CSRF vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through = 1.0.3...

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt entered by users into artificial intelligence AI-powered chatbots like OpenAI ChatGPT, Anthropic Claude, Microsoft Copilot, DeepSeek, Google Gemini, xAI Grok, Meta AI, and...

Malicious code in spectacular_spider_magenta-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02d5ef189199218d9d8bceae9530ff0ecf885f357c22427b3436e199c732895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-ronde25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2ba01eb463dd95a419795f61007304a54512528a4b2ac0a1f9197dee2b92e7 The package wibowo-ronde25-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

robloxinjector

robloxi...

Race Condition

@angular/platform-server, @angular/ssr and @nguniversal/common are vulnerable to Race Condition. The vulnerability is due to the platform injector being stored as a module-scoped global variable during server-side rendering, which allows concurrent requests to overwrite or access each other’s...

EUVD-2007-6106

Malware in sbrugna...

EUVD-2007-6360

Malware in sbrugna...

EUVD-2024-30330

Malicious code in bioql PyPI...

EUVD-2022-49916

Malicious code in bioql PyPI...

EUVD-2025-3204

Malicious code in bioql PyPI...

GHSA-68X2-MX4Q-78M7 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

Impact Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as a JavaScript module-scoped global variable. When multiple requests are processed concurrently, they could inadvertently share...

Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage

Impact Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as a JavaScript module-scoped global variable. When multiple requests are processed concurrently, they could inadvertently share...