655445 matches found
Important: libXfont2
Issue Overview: A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of...
VulnCheck KEV: CVE-2026-82970
Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.4.1...
MAL-2026-15626 Malicious code in fuels-forc (npm)
The package 'fuels-forc' was identified as containing malicious obfuscated code. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b993583bec4136d0b060dc6391c10e15f836e605b5b13b97dea6bb7a3dc1e5cd bin/cli.js runs whoami and reads os.hostname / os.platform, then POS...
SafeBrowsing Component Data Compromise
The vulnerability of the SafeBrowsing component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through the use of a malicious file...
Google Chrome GWP-ASan Confidential Data Access
The vulnerability of the GWP-ASan web browser component in Google Chrome relates to reading data from buffer areas beyond the acceptable limit. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a malicious file...
Linux Distros Unpatched Vulnerability : CVE-2026-83596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. CVE-2026-83596 Note that Nessus...
Google Chrome DoS
The vulnerability in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...
PT-2026-84034
Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified Description Improper memory handling when processing malicious web content can lead to memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fi...
Isolated Web Apps DoS
The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...
Adobe XD 60.0 < 61 Arbitrary code execution (APSB26-125)
The version of Adobe XD installed on the remote Windows host is prior to 61. It is, therefore, affected by a vulnerability as referenced in the APSB26-125 advisory. - Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curren...
RHEL 8 : freerdp (RHSA-2026:61251)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61251 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
Malicious Package
Overview grafeno-actions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview generate-schema-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious Package
Overview fuels-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview verify-contract-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious Package
Overview autobahn-electron-probe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview generate-schema-viem is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview fuels-typegen is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @lucideproxy/svg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00e810f5961798d82a45678ccddfa58f15503ed24c6cad677a6ee854d86d7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...