1155626 matches found
RHEL 9 : nodejs:24 (RHSA-2026:47057)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47057 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
RHEL 10 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.1.7 (RHSA-2026:49700)
The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49700 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...
RHEL 6 : tigervnc (RHSA-2026:49519)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49519 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...
Exodia
Exodia Autonomous AI-driven penetrat...
Malicious code in tailwindcss-anim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01f26860cd01782ea3614f8dd2d144ced75af610edac79984c24d67dee41d8a index.js hides a base64-encoded payload after a long run of tab characters and executes it via evalatob... at module load, so any require/import of t...
MAL-2026-11487 Malicious code in tailwindcss-anim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01f26860cd01782ea3614f8dd2d144ced75af610edac79984c24d67dee41d8a index.js hides a base64-encoded payload after a long run of tab characters and executes it via evalatob... at module load, so any require/import of t...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, spark, kafbat-ui-fips, zipkin, localstack, spark-fips, celeborn, opensearch, kayenta, metabase, seata, neo4j, elasticsearch, kayenta-fips, druid, keycloak-fips, apache-camel-karavan-devmode, camunda-zeebe, keycloak, spark-kubernetes-operator-fips...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, spark, kafbat-ui-fips, zipkin, localstack, spark-fips, celeborn, opensearch, kayenta, metabase, seata, neo4j, elasticsearch, kayenta-fips, druid, keycloak-fips, apache-camel-karavan-devmode, camunda-zeebe, keycloak, spark-kubernetes-operator-fips...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard , the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware...
Exploit for CVE-2026-14361
CVE-2026-14361 Consul Template's writeToFile helper opened an...
OS Command Injection
github.com/kube-logging/logging-operator is vulnerable to OS Command Injection. The vulnerability is due to the Fluentd configuration renderer FluentRender writing unescaped CRD strings such as Flow recordtransformer.records values directly into fluent.conf, which allows an attacker with permissi...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: falcoctl, crossplane, kubescape, spire-server, flux-source-controller, ko, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, neuvector-sigstore-interface, trivy-operator, trivy, policy-controller, skaffold, tekton-chains, kyverno, zot...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: falcoctl, crossplane, kubescape, spire-server, flux-source-controller, ko, aactl, tkn, zarf, kyverno-notation-aws, goreleaser, neuvector-sigstore-interface, trivy-operator, trivy, policy-controller, skaffold, tekton-chains, kyverno, zot...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: zarf, aactl, spire-server-fips, tekton-chains-fips, zot, falcoctl, goreleaser, skaffold, kubescape-server-fips, crossplane-fips, cloudbeat, trivy-operator, flux-source-controller, cosign, zarf-fips, teleport, tekton-chains, policy-controller-fips, tbot, skaffold-fips...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: zarf, aactl, spire-server-fips, tekton-chains-fips, zot, falcoctl, goreleaser, skaffold, kubescape-server-fips, crossplane-fips, cloudbeat, trivy-operator, flux-source-controller, cosign, zarf-fips, teleport, tekton-chains, policy-controller-fips, tbot, skaffold-fips...
MAL-2026-11425 Malicious code in nvtorch-oot-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92503f2178663997d57ffa45fbb89f4a55de70e94f66745b4edf283a98e830f The package's setup.py issues an install-time HTTP request to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/nvtorchootnightly...
Malicious code in nvtorch-oot-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92503f2178663997d57ffa45fbb89f4a55de70e94f66745b4edf283a98e830f The package's setup.py issues an install-time HTTP request to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/nvtorchootnightly...
Malicious code in trtllm-subdir-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2babc3deb7dd71a0515beeb63a43a5ab1b24bea455226652da9ea9377d1e5f setup.py performs an unconditional HTTP GET to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/trtllmsubdirtest at install time...
MAL-2026-11426 Malicious code in trtllm-subdir-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2babc3deb7dd71a0515beeb63a43a5ab1b24bea455226652da9ea9377d1e5f setup.py performs an unconditional HTTP GET to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/trtllmsubdirtest at install time...
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Attackers modified a JavaScript file served by advertising technology company Adform , turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to...