Lucene search
+L

66186 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/16 11:54 a.m.27 views

Malicious code in ioredis-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387bee0d123eeed248b8be6281784b88d2a3385943a3f696541c1ce48b1c817a ioredis-os appends -os to the widely-used ioredis package name and ships what appears to be a verbatim fork of ioredis same author, same upstream...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/06/16 11:54 a.m.21 views

MAL-2026-5879 Malicious code in ioredis-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387bee0d123eeed248b8be6281784b88d2a3385943a3f696541c1ce48b1c817a ioredis-os appends -os to the widely-used ioredis package name and ships what appears to be a verbatim fork of ioredis same author, same upstream...

6.1AI score
SaveExploits0References2
OSV
OSV
added 2026/06/16 11:54 a.m.12 views

MAL-2026-5882 Malicious code in redis-type-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9fefcfb296b7a9b0c08dc47f628f1987d349d5b57cc9b3c5cb2ce7e331f7e4 Package is published as redis-type-os but all in-package references README, docs/, CHANGELOG, repository field, author email point to redis-om /...

6.1AI score
SaveExploits0References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/16 11:54 a.m.31 views

Malicious code in redis-type-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9fefcfb296b7a9b0c08dc47f628f1987d349d5b57cc9b3c5cb2ce7e331f7e4 Package is published as redis-type-os but all in-package references README, docs/, CHANGELOG, repository field, author email point to redis-om /...

6AI score
SaveExploits0References9
GithubExploit
GithubExploit
added 2026/06/16 11:08 a.m.140 views

Exploit for Improper Authentication in Checkpoint Gaia_Os

CVE-2026-50751 Scanner Multi-target detection scanner for CV...

9.3CVSS6.2AI score0.82554EPSS
SaveExploits6
RedHat Linux
RedHat Linux
added 2026/06/16 8:05 a.m.11 views

postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...

8.8CVSS6.4AI score0.00378EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/06/16 7:57 a.m.16 views

Security update for perl-HTTP-Daemon

This update for perl-HTTP-Daemon fixes the following issues: CVE-2026-8450: Fixed OS command injection via sendfile bsc1266370. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

8.1CVSS5.3AI score0.01398EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/06/16 7:13 a.m.813 views

GlobalProtect - OS Command Injection

A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.Cloud NGFW, Panorama...

10CVSS9.2AI score0.99999EPSS
SaveExploits46References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/16 3:00 a.m.22 views

Malicious code in solana-mev-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65516d3e042858742ebfee878ff2de6361994ce0155dcbf53c8e0f24cd5fafb bot.js performs a hardcoded HTTPS GET to api.telegram.org's bot sendMessage endpoint, transmitting host fingerprint data collected via os.hostname,...

5.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.37 views

PT-2026-49603

Name of the Vulnerable Software and Affected Versions Zyxel GS1900-48HPv2 versions prior to 2.90ABTQ.1C0 Description A stack-based buffer overflow exists in the CGI program. This flaw allows an unauthenticated attacker on the local area network LAN to potentially execute operating system commands...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.17 views

Photon OS 5.0: Linux PHSA-2026-5.0-0878

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0878. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS6.2AI score0.00129EPSS
SaveExploits0References3
Photon
Photon
added 2026/06/16 12:00 a.m.27 views

Critical Photon OS Security Update - PHSA-2026-5.0-91-0882

Updates of 'python3-mako', 'python3-ujson', 'python3-lxml', 'python3-mistune', 'ruby', 'linux-esx', 'linux', 'python3' packages of Photon OS have been released...

8.8CVSS6AI score0.00241EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.14 views

Photon OS 5.0: Openssl PHSA-2026-5.0-0874

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.1CVSS6.5AI score0.66582EPSS
SaveExploits0References20
Photon
Photon
added 2026/06/16 12:00 a.m.24 views

Important Photon OS Security Update - PHSA-2026-5.0-92-0882

Updates of 'python3-mako', 'python3-ujson', 'python3-mistune', 'linux', 'python3' packages of Photon OS have been released...

8.8CVSS5AI score0.00811EPSS
SaveExploits1
Photon
Photon
added 2026/06/16 12:00 a.m.18 views

Critical Photon OS Security Update - PHSA-2026-5.0-0882

Updates of 'python3-lxml', 'python3-mako', 'linux', 'ruby', 'python3-ujson', 'linux-esx', 'python3-mistune', 'python3' packages of Photon OS have been released...

8.8CVSS6.8AI score0.00354EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.32 views

PT-2026-49827

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The device features a webserver that exposes a REST API authenticated via a token on the management network. An authenticated attacker can exploit an OS command...

9.1CVSS6.2AI score0.00921EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.15 views

Photon OS 5.0: Httpd PHSA-2026-5.0-0881

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS5.7AI score0.27984EPSS
SaveExploits9References8
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.13 views

Photon OS 5.0: Ansible PHSA-2026-5.0-0881

An update of the ansible package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS5.2AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.10 views

Photon OS 5.0: Bindutils PHSA-2026-5.0-0876

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0876. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS5.1AI score0.01874EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:00 a.m.17 views

Photon OS 5.0: Linux PHSA-2026-5.0-0837

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0837. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS6AI score0.00686EPSS
SaveExploits1References310
Rows per page
Query Builder