95 matches found
PT-2026-104417
Name of the Vulnerable Software and Affected Versions Loom for AWS versions prior to 1.6.1 Description A missing authentication for a critical function in the authentication dependency allows remote actors to obtain super-admin authority over the agent control plane. This occurs in deployments...
CVE-2026-103956: Missing Authentication for Critical Function
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
CVE-2026-103957: Server-Side Request Forgery (SSRF)
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...
PT-2026-104418
Name of the Vulnerable Software and Affected Versions Loom for AWS versions prior to 1.7.0 Description An authenticated remote user can perform a Server-side request forgery SSRF through the OAuth2 discovery handling. By providing a crafted discovery document address during the registration of a...
CVE-2026-103958: Server-Side Request Forgery (SSRF)
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...
PT-2026-104419
Name of the Vulnerable Software and Affected Versions Loom for AWS versions prior to 1.7.0 Description An authenticated remote user can perform a Server-side request forgery SSRF through the tool server and remote agent connection handling. By providing a crafted connection address during the...
Building the Truman Show: A TrustZone-Based Framework for Lightweight Out-Of-Band Kernel Security Monitoring
The increasing number of vulnerabilities in operating systems, together with sophisticated kernel-level threats e.g., rootkits, has weakened the effectiveness of traditional in-kernel protection mechanisms. Since these defenses operate at the same privilege level as the kernel, they share the sam...
devqubit-cudaq (0.1.12), el-loom (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2026-24189 via cudaq (>=0.9.1, <=0.13.0)
cudaq PYPI version =0.9.1, =0.1.1, =0.1.91, =0.10.2091 Source cves: CVE-2026-24189 Source advisory: SNYK:PYTHON-CUDAQ-16636605...
EUVD-2019-5631
Malware in sbrugna...
CVE-2025-9861
The ThemeLoom Widgets WordPress plugin (CVE-2025-9861) is affected by a stored cross-site scripting (XSS) vulnerability in the los_showposts shortcode across all versions up to 1.8.5. The issue stems from insufficient input sanitization and output escaping for user-supplied attributes, enabling a...
CVE-2025-9861 ThemeLoom Widgets <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
The ThemeLoom Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'losshowposts' shortcode in all versions up to, and including, 1.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Malicious code in loom-plugin-babel (npm)
The package loom-plugin-babel was found to contain malicious code...
Malicious code in loom-plugin-prettier (npm)
The package loom-plugin-prettier was found to contain malicious code...
Malicious code in loom-plugin-rollup (npm)
The package loom-plugin-rollup was found to contain malicious code...
Malicious code in loom-cli (npm)
The package loom-cli was found to contain malicious code...
Malicious code in loom-plugin-stylelint (npm)
The package loom-plugin-stylelint was found to contain malicious code...
Malicious code in loom-plugin-build-library (npm)
The package loom-plugin-build-library was found to contain malicious code...
MAL-2025-25574 Malicious code in loom-plugin-build-library (npm)
The package loom-plugin-build-library was found to contain malicious code...