Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31613 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...

PT-2026-86622

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists in the /pages/us transac.php endpoint. This occurs when the Username variable is manipulated, allowing a remote attacker to execute arbitrary SQL...

Malicious code in dolyame-ui-container (npm)

Source: amazon-inspector 0b0f03a063fb3a6b8c7605612b587eddfefa6181b85b14654ee93f267dd790e1 On require of the package, index.js loads compat.js, which at module load time downloads a platform-specific binary from hostnames assembled at runtime via string-splitting oob-worker.cf102-baf.workers.dev,...

Malicious code in dolyame-ui-codemods (npm)

Source: amazon-inspector aa4592f76ef0995b4e3c8b0cc15c00862cf594cbaebbfcd2bf25d2640bbf6012 On require'dolyame-ui-codemods', index.js loads polyfill.js, which reconstructs remote hostnames from split string-fragment arrays joined at runtime assembling oob-worker..workers.dev subdomains and...

Malicious code in dolyame-boxy-mobile-bnpl-text-block (npm)

Source: amazon-inspector 9e5ba9319e9ab791d3944f19baaae57aac3c2d381bf03ccf736d8ae09a2ba4b6 On any require of the package, index.js loads./compat.js, which fetches a native binary from string-fragmented Cloudflare Workers hosts under oob-worker.cf.workers.dev with a DNS TXT-record fallback that...

Malicious code in devplatform-spa-plugin-notifier (npm)

Source: amazon-inspector 877337509f36ab52fcfb93d1dc48d77439a5154d077fc047b7263265cfb71468 On module load, index.js requires bootstrap.js which selects a platform-specific asset, downloads an opaque binary from hardcoded Cloudflare Workers subdomains oob-worker.cf101-adf.workers.dev,...

Malicious code in devplatform-spa-route-tree (npm)

Source: amazon-inspector eabd446648c0aff2fa8f21202eeee1f46366ff6678c7811f951ff7f2413616cd On require of devplatform-spa-route-tree, index.js loads loader.js which downloads a platform-specific binary from hostnames assembled via array-join string splits — Cloudflare Workers subdomains...

Malicious code in devplatform-spa-devtools (npm)

Source: amazon-inspector 7251ae6bb63fe6eca906250d9300970dddd8d1ebfaad5111bd67dea64e231c01 On require'devplatform-spa-devtools', index.js loads runtime.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts oob-worker.cf103-070.workers.dev,...

Malicious code in devplatform-cli (npm)

Source: amazon-inspector 626164264796294f1cb4322c03454ff5d9c50f7f0edb7534bfb6a5843d08079d On require of devplatform-cli, index.js loads adapter.js which assembles Cloudflare Workers hostnames from string-split fragments e.g. "oob-worker.cf","103-070.workers.d","ev".join"" with a DNS-TXT...

Malicious code in devplatform-react-query-clients (npm)

Source: amazon-inspector 192681d10673d935bcba617102ed5581cc928ba8ebedda203cebe5d33d7f067a On require of the package, index.js loads adapter.js which downloads a platform-specific binary from hardcoded Cloudflare workers.dev endpoints oob-worker.cf99-9b3.workers.dev,...

Malicious code in delivery-ci-unit (npm)

Source: amazon-inspector 69ab1e8e2553a7469b1ce9a50549b0f1cb964160096693715d10643a853eade4 On require of the package, index.js loads loader.js, which reconstructs attacker-controlled hostnames from split-string fragments oob-worker.cf102-baf.workers.dev, oob-worker.cf99-9b3.workers.dev,...

exploit_dev_overview

ExploitDev Overview ExpDev Welcome Peeps to an short overvie...

goproxy v1.9.1

GoProxy GoProxy is a library to create a customized HTTP/HTTPS proxy server using Go aka Golang, with several configurable settings available. The target of this project is to offer an optimized proxy server, usable with reasonable amount of traffic, yet customizable and programmable. The proxy...

PT-2026-86571

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the mysqli query function within the /admin/modal add product.php file. A remote attacker can perform a SQL injection by manipulating the fname variabl...

PT-2026-86566

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /admin/modal add course2.php file within the mysqli query function. Remote manipulation of the course variable allows for SQL injection, a techniqu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053411 advisory. In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053213 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kernmount fails and returns an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053229 advisory. In the Linux kernel, the following vulnerability has been resolved: kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053248 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mc...