Malicious Package

Overview zzpdfvar06 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zztest17785553774 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Linux Distros Unpatched Vulnerability : CVE-2026-50650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally. CVE-2026-50650 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2026-50646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. CVE-2026-50646 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2026-54464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than...

Oracle Linux 8 : hplip (ELSA-2026-40894)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40894 advisory. 3.18.4-14 - RHEL-192009 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2026-57432 vulnerabilities

Vulnerabilities for packages: perl...

CVE-2026-15768 vulnerabilities

Vulnerabilities for packages: chromium...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +23 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 - @scopieflows/app-image-helper 0.1.12 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxslt: libxslt-1.1.45-0.1.1.hum1 aarch64, x8664 libxslt-devel-1.1.45-0.1.1.hum1 aarch64, x8664 python3-libxslt-1.1.45-0.1.1.hum1 aarch64, x8664 libxslt-1.1.45-0.1.1.hum1.src src...

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil , which was observed using...

CVE-2026-57432 vulnerabilities

Vulnerabilities for packages: perl...

GHSA-WHHX-PV66-XHGQ vulnerabilities

Vulnerabilities for packages: perl...

MAL-2026-10768 Malicious code in trongridev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2db83ccb7d07bdacd1bdf7c32fbaa2a7fb40d7bd599e315f25265ca4bb9d3c03 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

RHSA-2026:40236 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:35453 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Oracle Linux 10 : libtiff (ELSA-2026-19150)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19150 advisory. 4.6.0-8.1 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159310 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : post (ELSA-2026-25930)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25930 advisory. 2:3.8.5-10 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 Tenable has extracted the preceding descriptio...

RockyLinux 9 : hplip (RLSA-2026:40831)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40831 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

Logic Controllers ControlLogix DoS

The vulnerability of the microprogrammed software modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s ControlLogix logic controllers is related to improper verification of integrity values. Exploiting this vulnerability can allow an attacker to trigger a service failure using...