Malicious code in secure-test-browser-garuibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8fcaf87e5bb685b67550c7a276d6a5bb24515de2eb125efeecee86c404858a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15373 Malicious code in secure-test-browser-k866lkga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234f1df9c5e682a0e08e99dc5fdcec6bf89a911051031d5ccda5472fcb721d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15284 Malicious code in secure-test-browser-4eirlssh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f5f70ba8dcc1b2a777d5133b3b0b7f4bcf7be0116c7290484f405235a432da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15293 Malicious code in secure-test-browser-6ms5icgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 401d19736bba20f1a09025dcbd5d29fa5eb579a81e03bd1b5f19e42849d8fff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15323 Malicious code in secure-test-browser-cnsorczp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2180c388e6ab2eb5969da899487cf674164ef73ffbcbdc929bda7e440c378510 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15436 Malicious code in secure-test-browser-ui1d892v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bcf3be56af9ecd21fab7aae6b84be4ce66de8fc32609b1f4bb924ba39163ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-xynt39lg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a734e3f6caa0722bcb17cfd44319516cc5cbc36c0581c4600e9c694bece70ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-0xcszcdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368ae41ef0802d6521cdf120ef4a0b8acf46421306597b5aab3ec107f289a741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-y4yd7ndu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f792c1beb7268d7c12da9151f5f9596965848efd31f960cf9e5d9025a97fd8a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15116 Malicious code in classlink-mwnbufxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b68b3ba66b8fe9bed99c395a676db7d0107c7b0330d8d00edbf52b6fffb08f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

YellowKey-Bitlocker-CVE-2026-45585

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...

CVE-2026-56854

The golang.org/x/crypto package is affected by a vulnerability where the source-address critical option in permissions returned by certain authentication callbacks was not validated. Specifically, the check was only enforced for PublicKeyCallback and VerifiedPublicKeyCallback , meaning restrictio...

CVE-2026-81341

wolfEngine (before 1.4.1 ) reuses the AES-CCM nonce on TLS 1.2 and DTLS 1.2 records because it sources the explicit nonce from the record input buffer rather than the TLS sequence number. Since the record layer leaves that field for the cipher to populate, the value is constant, meaning every AES...

CVE-2026-81020 wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

CVE-2026-81019 wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

ALPINE-CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

AZL-98310 CVE-2026-42393 affecting package dovecot 2.3.20-1

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-82245 Budibase before 3.41.3 Missing Authorization License Management

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

EUVD-2026-67676

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...