WS-2019-0567

curl in versions curl-7340 to curl-7653 is vulnerable to Use-of-uninitialized-value in smtpstateehloresp, related to lib/smtp.c...

WS-2018-0652

curl in versions curl-7400 to curl-7630 is vulnerable to UNKNOWN READ related to lib/url.c...

WS-2019-0534

The zstd in versions v0.4.3 to v1.4.2 is vulnerable to Stack-buffer-overflow in ZSTDdecodeLiteralsBlock , related to lib/legacy/zstdv03.c...

WS-2018-0646

curl 7.21.0 through 7.57.0 is vulnerable to an heap-buffer-overflow in loop on lib/curlfnmatch.c...

WS-2021-0007

All versions of an0n-chat-lib npm package contain a malicious code...

WS-2019-0404

Bitcroe-lib versions 1.0.4 and 8.10.0 contains malicious code. The malicious code steals cryptocurrency wallets...

WS-2019-0402

Bitcoisnj-lib is a malicious package which designed to find and exfiltrate cryptocurrency wallets...

WS-2019-0403

bitconijs-lib package was designed to find and exfiltrate cryptocurrency wallets...

WS-2019-0400

bitcoijns-lib is a malicious package which designed to find and exfiltrate cryptocurrency wallets...

WS-2019-0397

bictore-lib is a malicious package which designed to find and exfiltrate cryptocurrency wallets...

WS-2019-0396

bictoinjs-lib is a malicious package which designed to find and exfiltrate cryptocurrency wallets...

WS-2019-0060

All versions of redbird have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-44931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer- service.c in...

CVE-2026-8328

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

CVE-2026-44931

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd...

CVE-2026-44931

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd...

CVE-2026-44931

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd...

CVE-2026-8328: Server-Side Request Forgery (SSRF)

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

CVE-2026-39803: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The chunked clause of 'Elixir.Bandit.HTTP1.Socket':readdata/2 in lib/bandit/http1/socket.ex ignores the caller-supplied :length option when...

PT-2026-40587

Name of the Vulnerable Software and Affected Versions malcontent version 0.14.0 Description A D-Bus method RecordUsage in malcontent-timerd allows arbitrary system users to exhaust disk space in the /var/lib/malcontent-timerd directory. Recommendations At the moment, there is no information about...