IND780 - Local File Inclusion

IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10' is vulnerable to unauthenticated local file inclusion. It is possible to traverse the folders of the affected host by providing a relative path to the...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds condition during mtreportfixup by passing in a report descriptor smaller than 607 bytes. mtreportfixup attemp...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fixed a possible memory leak when the module exits. After committing 1fa5ae857bb1 “driver core: removed the struct device’s busid string array”, the name of the device is allocated dynamically. This allocation needs...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-9856 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105424 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1 driver core:...

Malicious code in mt-ts-serverless-starter (npm)

Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files — os.hostname, os.userInfo, home directory, DNS server...

Malicious code in mt-ts-serverless-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files —...

MAL-2026-14536 Malicious code in mt-ts-serverless-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files —...

Malicious Package

Overview mt-ts-serverless-starter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Movable Type - XML-RPC Command Injection (CVE-2021-20837)

Exploits CVE-2021-20837 by sending mt.handlertocoderef XML-RPC calls with base64-encoded backtick OS commands to /mt/mt-xmlrpc.cgi. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Movable Type XML-RPC mt.handlertocoderef RCE CVE-2021-20837 — opens execute...

Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the MT Fire Eagle commtfireeagle component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

HID: multitouch: fix out-of-bounds bit access on mt_io_flags

...

CVE-2026-45755 Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged...

CVE-2026-45755

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged...

CVE-2026-45755: Missing Authentication for Critical Function

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged...

github-acc-test (>=0.0.1, <=0.3.1), libmultilabel (>=0.0.1, <=0.1.4) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.5)

pytorch-lightning PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - github-acc-test =0.0.1, =0.0.1, =0.0.1rc1, =0.1.0, =1.0.0rc1, =1.0.1 Source cves: CVE-2024-8019 Source advisory:...

PT-2026-121251

Уязвимость функции xt rateest mt компонента net/netfilter/xt rateest.c ядра операционной системы Linux связана с некорректным вычислением. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

mt-telescope (>=0.0.1rc1, <=0.0.2), suzieq (>=0.11.0, <=0.12.0) potentially affected by CVE-2026-10804 via streamlit (0.79.0)

streamlit PYPI version 0.79.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mt-telescope =0.0.1rc1, =0.11.0, =0.12.0 Source cves: CVE-2026-10804 Source advisory: OSV:GHSA-VQWP-45WM-R9R5...

mt-telescope (>=0.0.1rc1, <=0.0.2), suzieq (>=0.11.0, <=0.12.0) potentially affected by CVE-2026-10804 via streamlit (0.79.0)

streamlit PYPI version 0.79.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mt-telescope =0.0.1rc1, =0.11.0, =0.12.0 Source cves: CVE-2026-10804 Source advisory: OSV:PYSEC-2026-212...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-5241 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...