CVE-2026-21636

A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...

MiracleLinux 8 : gupnp-1.0.6-2.el8 (AXSA:2021-2196:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2196:02 advisory. gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services CVE-2021-33516 Tenable has extracted t...

EUVD-2021-10882

Malware in sbrugna...

EUVD-2021-20208

Malware in sbrugna...

EUVD-2020-2707

Malware in sbrugna...

EUVD-2005-2730

Malware in sbrugna...

EUVD-2021-14717

Malware in sbrugna...

EUVD-2021-14718

Malware in sbrugna...

EUVD-2021-2139

Malware in sbrugna...

EUVD-2024-2130

Malicious code in bioql PyPI...

EUVD-2022-45833

Malicious code in bioql PyPI...

EUVD-2022-45824

Malicious code in bioql PyPI...

EUVD-2022-47390

Malicious code in bioql PyPI...

EUVD-2025-0172

Malicious code in bioql PyPI...

GHSA-XJV7-6W92-42R7 marimo vulnerable to proxy abuse of /mpl/{port}/

Summary The /mpl// endpoint, which is accessible without authentication on default Marimo installations allows for external attackers to reach internal services and arbitrary ports. Details From our understanding, this route is used internally to provide access to interactive matplotlib...

Linux Distros Unpatched Vulnerability : CVE-2020-8558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent...

CVE-2025-8179

Summary: CVE-2025-8179 affects PHPGurukul Local Services Search Engine Management System 2.1. An SQL injection exists in an unknown function of /admin/changeimage.php, triggered by manipulating the editid parameter. The vulnerability is exploitable remotely, and publicly disclosed exploits exist....

CVE-2025-6863

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can...

CVE-2025-6863

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can...

CVE-2025-6863 PHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injection

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can...