EUVD-2026-59771

A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/auth.py of the component Login Endpoint. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is...

MAL-2026-14086 Malicious code in kit-hydration-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...

MAL-2026-14096 Malicious code in svelte-goal-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MINI-9FMM-FFGH-8P39

Bulletin has no description...

MAL-2026-14095 Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-17227

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

CVE-2026-66271

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-66272

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-58707

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-66272

Dell Wyse Management Suite (WMS) affected: versions prior to 2605.0.2. CVE-2026-66272 describes a Missing Authentication for Critical Function vulnerability that allows an unauthenticated attacker with remote access to potentially disclose information (CVSS 3.1: 5.3, MEDIUM; AV:N/AC:L/PR:N/UI:N/S...

MAL-2026-14083 Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5955868f72344703128add3301e3a85b51773de502f24e636fe0b9bba86d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14081 Malicious code in game_overlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zip-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a990db9c306a25a8b0663088429ef5cf3939c32a9f8d6b1fc3066e8bf42a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14077 Malicious code in dinotech-auth-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21556f23a2332af836a6f0c905a4391a6699a2dcd8a597c9e9955caf795333f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @vyzensockets/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a38578ec3825683bc7646595c0676583ebf4bb3b5c36b5b92c5c7f4537e653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm_pkg_1093 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbcfd38e8ac9c31e28e53af79f450b1bf48ee623593d4dfd77388c945f802653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14098 Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...