5538 matches found
MAL-2026-344 Malicious code in ofjaaah-security-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bfbd5c89af01468786a4ff45da3126dbd49e28e4a250d0d124fc65b1f0c508 The package ofjaaah-security-lib was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview auc-2-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview zis-common-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in auc-2-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...
Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...
EUVD-2026-3048
Malicious code in zis-common-lib npm...
EUVD-2026-3086
Malicious code in auc-2-lib npm...
MAL-2026-269 Malicious code in auc-2-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...
MAL-2026-320 Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...
CVE-2025-48647: Improper Input Validation
In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-4848
ActiveRecord-JDBC-Adapter AR-JDBC contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input before using it in SQL queries. This may allow a remote attacker to inject or...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004091)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004091 advisory. A double-free can happen in idrremoveall in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001757)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001757 advisory. A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of...
CVE-2026-21899
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, in base64urlDecode, padding-stripping...
PT-2026-6500
Summary The user-provided chart name in the kustomize manager is appended to the helm pull --untar command without proper sanitization. Details Adversaries can provide a maliciously crafted kustomization.yaml in conjunction with a Helm repo's index.yaml file to trick Renovate to execute arbitrary...
PT-2026-4554
Summary The user-provided string repository in the helmv3 manager is appended to the helm registry login command without proper sanitization. Details Adversaries can provide a maliciously crafted Chart.yaml in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute...
ROS-20260112-7314
A vulnerability in the dmirrordeviceevictchunk function of the lib/testhmm.c module of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2022-35085
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...
CVE-2020-12118
The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties...