Malicious code in xapi-lib (npm)

[email protected], 88.2.5, 90.2.1, and 90.3.1 describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value fa79878bc2cfb48bd5127ae26fb661b1, which i...

MAL-2026-17438 Malicious code in @celestial-community/baileys (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

wch-ch56x-lib

wch-ch56x-lib This library was built alongside Hydradancer, a new backend for the Facedancer USB emulation library based on the WCH569 chip. Reliable drivers were needed for this project and many features were missing from the WCH examples or untested. This library provides USB3, USB2, HSPI and...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in js-yaml (CVE-2026-84375)

Summary IBM Db2 Developer Extension is affected by vulnerability in js-yaml CVE-2026-84375 Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.j...

CVE-2026-111146 ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111145

Versions of ytnef through 2.1.2 are vulnerable to a heap out-of-bounds read in the DecompressRTF() function located in lib/ytnef.c. The root cause is a failure to validate uncompressedSize for uncompressed RTF streams. An attacker can provide a crafted winmail.dat TNEF attachment containing a mal...

CVE-2026-111145 ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams. Attackers can supply a crafted winmail.dat TNEF attachment with a malicious PTBINARY MAPI property to crash ytnefprint or libytn...

CVE-2026-111146

Versions of ytnef through 2.1.2 are vulnerable to a heap out-of-bounds read in the MAPIPrint() function. The root cause is located in lib/ytnef.c , where providing compressed RTF properties in a crafted winmail.dat file can result in a decompressed RTF that lacks a NUL terminator . This causes pr...

CVE-2026-105660

The bandit web framework (versions 0.6.0 before 1.13.0 ) is vulnerable to an Improper Validation of Syntactic Correctness of Input (CWE-1286) issue. An unauthenticated remote attacker can manipulate the conn.host and conn.port values by providing an HTTP/1 absolute-form or authority-form request ...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

Malicious code in xapi-lib (npm)

[email protected], 88.2.5, 90.2.1, and 90.3.1 describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value fa79878bc2cfb48bd5127ae26fb661b1, which i...

CVE-2026-79830

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

CVE-2026-79830

A stack buffer overflow vulnerability exists in the HPE NonStop Kernel Level Thread Model Lib (component T1132 ), which could allow an attacker to achieve arbitrary code execution . The vulnerability poses a risk of memory corruption , denial of service (DoS) , and stack overflow . HPE has releas...

EUVD-2026-102001

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

CVE-2026-79830 HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

telegram-osint-lib

Telegram OSINT scenario library Description A lot of Telegram API libraries around, but none of them demonstrates how to execute complex scenarios like draining all photos from channels, monitor users presence or register new account. This projects aims to correct situation: now you can easily...

CVE-2020-29599

CVE-2020-29599 Artifex ImageMagick lib Artifex vesrion 6.9.11-40 and 7.0. 10-40 SVG files will be converted to images...

CVE-2026-86561

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

CVE-2026-86848

A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend...

CVE-2026-86846

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...