EUVD-2026-102506

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user: permissions can call /admin/sys/user/info, update, or delete to read records,...

EUVD-2026-102505

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with...

CVE-2026-111366

The cool-admin-midway application, through version 8.0.0 , is vulnerable to an authorization bypass (CWE-639) within the /admin/sys/user endpoints. This flaw allows department-limited administrators to manage users outside of their assigned departments by providing arbitrary user IDs . Attackers ...

CVE-2026-111365

The cool-admin-midway software (through version 8.0.0 ) is vulnerable to an authorization bypass (CWE-639) in its system role endpoints. Attackers with ordinary sys:role permissions can provide arbitrary role IDs to call the /admin/sys/role/info , update , or delete endpoints. This allows them to...

CVE-2026-111366 cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user: permissions can call /admin/sys/user/info, update, or delete to read records,...

CVE-2026-23413

In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollback asymmetry Fix a use-after-free in the clsact qdisc upon init/destroy rollback asymmetry. The latter is achieved by first fully initializing a clsact instance, and then in a seco...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2729 more potentially affected by CVE-2025-60542 via typeorm (>=0.0.2-alpha.43, <=0.3.25)

typeorm NPM version =0.0.2-alpha.43, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: CVE-2025-60542 Source advisory: MEND:CVE-2025-60542...

Malicious code in midway-cache (npm)

The package midway-cache was found to contain malicious code...

Malicious code in midway-xtpl (npm)

The package midway-xtpl was found to contain malicious code...

MAL-2025-26312 Malicious code in midway-xtpl (npm)

The package midway-xtpl was found to contain malicious code...

Malicious code in midway-logger (npm)

The package midway-logger was found to contain malicious code...

Malicious code in midway-dataproxy (npm)

The package midway-dataproxy was found to contain malicious code...

MAL-2025-26311 Malicious code in midway-logger (npm)

The package midway-logger was found to contain malicious code...

MAL-2025-26309 Malicious code in midway-cache (npm)

The package midway-cache was found to contain malicious code...

MAL-2025-26310 Malicious code in midway-dataproxy (npm)

The package midway-dataproxy was found to contain malicious code...

SUSE CVE-2020-15863

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial o...

Malicious code in purple_team_midway_cenario_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e78d943ca5c3b25d23aef36ac8b32d6df51c114bcae3b18f06ec806927f3bab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1090576e788b78404457c1ebcc9bdc3ad31cd07bafd6331cda384ea540e1ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e40f181749a8f708b27116a5ebf463e016a429d79b88a02dce3c38bbdeb65f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e1d2b1fbe20521d638df7232e8617a51354104986647c485570374818b08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...