MAL-2026-17298 Malicious code in testosu888 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faa5787fbebe8c5d73f3291c77975efb91c504dddf6a1d82cbe7e9f25372b27 On loading dist/index.cjs main entry and on running the dot2env CLI dist/cli.cjs, the package invokes a dispatchAnalytics routine that reads...

CyberCodex

🌐 CyberCodex v3.2 - 22源全频谱版 -00FF41?style=for-the-badge&logo=python&logoColor=white CyberCodex 是一个自主、自更新的 22源零成本OSINT、数据泄露/泄漏与威胁情报引擎 、无偏见网络战百科全书（事件法典） 、MITRE ATT &CK知识库以及双视角技术词典 ，专为 Windows CMD、PowerShell 和 Linux 终端 设计，且零外部依赖 。 📡 22个零成本公共情报与泄漏源（无需API密钥） | 情报来源| 端点 / 协议| 提取的遥测数据| 成本 / 密钥...

CVE-2026-12268

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...

CVE-2026-12267 Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution...

CVE-2026-12268 Authenticated PowerShell Injection leads to RCE

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...

EUVD-2026-88213

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...

CVE-2026-12268 Authenticated PowerShell Injection leads to RCE

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...

CVE-2026-12268

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection during a Windows DNS SPF/TXT record push. This vulnerability can lead to remote code execution (RCE). The provided documents do not specify the exact component, file, or root cause details beyond the injec...

PT-2026-99849

Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6201 Description An issue exists that allows PowerShell command injection during the Windows DNS SPF/TXT record push process, which can lead to remote code execution. Recommendations Update ManageEngi...

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 — ManageEngine Applications Manager Remote Code...

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 — ManageEngine Applications Manager Remote Code...

CVE-2026-100584

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

EUVD-2026-87467

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584 OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584 OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584

The OpenClaw npm-distributed agent runtime (versions >= 2026.2.26 and

CVE-2026-100584 OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584: Untrusted Search Path

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

PT-2026-99220

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.26 through 2026.7.0 Description On Windows hosts running in exec allowlist mode, PowerShell command analysis may approve an executable resolved from PATH but execute a different file with the same name located in the...