MAL-2026-13866 Malicious code in @years18/n8n-nodes-utils-helper-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9923595138c727382a8b1e870530f6d55ded8a052ee374569ad8b87b1560c07f The package masquerades as an n8n community node name @years18/n8n-nodes-utils-helper-v, node file nodes/PwnNode.node.js with an empty 'x' descriptio...

Exploit for CVE-2026-70376

CVE-2026-70376 — Pluck CMS Site-wide CSRF → RCE Fail-open Refere...

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session logs, including API keys and passwords. The weakness affected encrypted reasoning objects used by the providers'...

Exploit for CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Executio...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2024-38542: RDMA/manaib:...

SUSE-SU-2026:3595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2024-38542: RDMA/manaib...

abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows ...

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories

A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package...

ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching

A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...

Important: Red Hat Security Advisory: ldns security update

An update for ldns is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Malicious code in egypt0811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d31e1b5baa802662cbb61387f5c3b759d159e74e8776d9515198db5c168074 The package contains only index.html declared as main with no JavaScript modules, no lifecycle scripts preinstall/install/postinstall, and no bin...

MAL-2026-13806 Malicious code in egypt0811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d31e1b5baa802662cbb61387f5c3b759d159e74e8776d9515198db5c168074 The package contains only index.html declared as main with no JavaScript modules, no lifecycle scripts preinstall/install/postinstall, and no bin...

MAL-2026-13832 Malicious code in passport811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b8ce5a6dee87674b66e3aad6e3cf750c6e24243dd564922ff7b68be2f48b8 [email protected] contains a single HTML file that impersonates a Cloudflare Turnstile 'Just a moment...' challenge. After the Turnstile callback...

MAL-2026-13804 Malicious code in dzvchorehui2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb64bc6f1d195b61b422e1857f68a4f0d94133d7066d640db696b73a4364f5 The package contains a single HTML file that impersonates a Cloudflare 'Just a moment' challenge screen. An obfuscated inline script hex-named...

Malicious code in dzvchorehui2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb64bc6f1d195b61b422e1857f68a4f0d94133d7066d640db696b73a4364f5 The package contains a single HTML file that impersonates a Cloudflare 'Just a moment' challenge screen. An obfuscated inline script hex-named...

Malicious code in passport811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b8ce5a6dee87674b66e3aad6e3cf750c6e24243dd564922ff7b68be2f48b8 [email protected] contains a single HTML file that impersonates a Cloudflare Turnstile 'Just a moment...' challenge. After the Turnstile callback...

MAL-2026-13825 Malicious code in mnzjgxciwadk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb5ec6b21fbd7d0b720bf6dd7257a5b6e0e9428fe55d8197fccec53c79a662 The package contains a single file, index.html, which is also declared as the package main. The HTML presents a Cloudflare Turnstile-styled challenge...

MAL-2026-13841 Malicious code in vkldhcmieru6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25890a37fa8da48d2dc2868e010cef8cb3427faa42218cec4b858ac82db679d7 The package contains only index.html declared as main in package.json and a minimal package.json with no lifecycle scripts. The HTML impersonates a...

Malicious code in hxckdoeaqjlc8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d324cd3fd06a0d97ae5fb9263df818bc505d28ebcdda8e90814b5630de70e108 The package ships a single HTML file that impersonates Cloudflare's 'Just a moment...' interstitial. On Turnstile widget callback, embedded JavaScrip...

Malicious code in nihzvdeowx5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303f930ccf841284aaa263af6244d308d3bfd0d83b5af6ae037ff634f2518d94 The package contains only index.html declared as main in package.json and no JavaScript entry point, lifecycle scripts, or other module code. The HTM...