CVE-2026-46410

FileBrowser Quantum exposes sensitive share information (source and path) to unauthenticated users. Affected versions are prior to 1.3.2-stable and 1.4.1-beta. The issue is fixed in 1.3.2-stable and 1.4.1-beta. No public workarounds are documented in the provided sources. Remediation: upgrade to ...

MAL-2026-4350 Malicious code in clobprice.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Linux Distros Unpatched Vulnerability : CVE-2021-47330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if the final 'serialconfig' fails, 'info' is leaking. Add a resourc...

CVE-2025-50202 Lychee Path Traversal Vulnerability

Lychee is a free photo-management tool. In versions starting from 6.6.6 to before 6.6.10, an attacker can leak local files including environment variables, nginx logs, other user's uploaded images, and configuration secrets due to a path traversal exploit in SecurePathController.php. This issue h...

[SECURITY] [DSA 5843-1] rsync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5843-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2025 https://www.debian.org/security/faq -...