PT-2026-117939

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell run commands without confirmation because the headless presenter's execution allowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by...

CVE-2026-86772 Snipe-IT 8.6.3 Stored XSS via Department Names

Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink where department names are rendered unescaped in the fallback branch for users without departments.view permission. Users with departments.edit permission can inject...

Malicious code in circuit-runtime-presenter (npm)

Source: ossf-package-analysis 3cdb658ec8c6d8d9af631260f52c7b97315d6714449b7e8bcd8ac60e65644951 The OpenSSF Package Analysis project identified 'circuit-runtime-presenter' @ 10.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in circuit-runtime-presenter-test (npm)

--- Credit: OpenSSF source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2024-6345 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2024-6345 Source advisor...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH9...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8RFP-98V4-MMR...

Malicious code in circuit-runtime-presenter-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48809 Malicious code in circuit-runtime-presenter-test (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2008-3502

Malware in sbrugna...

EUVD-2008-3501

Malware in sbrugna...

EUVD-2019-4099

Malware in sbrugna...

EUVD-2019-4101

Malware in sbrugna...

EUVD-2024-52463

Malicious code in bioql PyPI...

EUVD-2025-30803

Malicious code in bioql PyPI...

EUVD-2025-30818

Malicious code in bioql PyPI...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication...