262991 matches found
MAL-2026-10525 Malicious code in @vite-mcp/vite-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9828d7f04091054759c65d427b8f9d7b2853a8a062f9ca261a37e0a0bbc231d0 Package @vite-mcp/[email protected] impersonates the legitimate vite package: package.json declares name '@vite-mcp/vite-type', author 'Evan You',...
Malicious code in fastify-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d824f75a77642b33c2c29524f9decca40c16a12aabe0a2528f3d90deac8720 The package's exported getPlugin function fetches JSON from https://svganchordev.net/icons/105 and passes the response's data.credits field to new...
MAL-2026-10519 Malicious code in chai-as-sets (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62935357bb620be6ade887e298b5e5bbd6bff0b7a171a79f852d19c58142da4 The package name and description advertise a chai plugin, but the main entry point spawns a detached child process lib/initializeCaller.js when the...
CVE-2026-58233
SAP Change and Transport System Attach Tool ctsattach allows an authenticated attacker to supply a specially crafted archive file which, when processed by the application�s library, can trigger insecure deserialization and lead to remote code execution RCE on the system. Successful exploitation...
EUVD-2026-43608
SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint...
EUVD-2026-43546
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit th...
EUVD-2026-43542
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to...
CVE-2026-58233 Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)
SAP Change and Transport System Attach Tool ctsattach allows an authenticated attacker to supply a specially crafted archive file which, when processed by the application�s library, can trigger insecure deserialization and lead to remote code execution RCE on the system. Successful exploitation...
CVE-2026-58233
Summary: CVE-2026-58233 affects SAP Change and Transport System Attach Tool (ctsattach). An authenticated attacker can supply a specially crafted archive that, when processed by the application’s library, triggers insecure deserialization and remote code execution (RCE). Exploitation requires the...
EUVD-2026-43596
SAP Change and Transport System Attach Tool ctsattach allows an authenticated attacker to supply a specially crafted archive file which, when processed by the application�s library, can trigger insecure deserialization and lead to remote code execution RCE on the system. Successful exploitation...
PT-2026-58611
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
VulnCheck KEV: CVE-2026-58644
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
PT-2026-58133
Name of the Vulnerable Software and Affected Versions Microsoft Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code over a network. Recommendations At the...
PT-2026-57948
Name of the Vulnerable Software and Affected Versions SAP Change and Transport System Attach Tool ctsattach affected versions not specified Description An authenticated attacker can provide a specially crafted archive file that triggers insecure deserialization when processed by the application...
PT-2026-58625
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use after free issue exists in the Windows SMB Server Network Transport Driver srvnet.sys. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use...
PT-2026-58147
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows FTP Service allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program...
PT-2026-58134
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow exists in Windows DHCP Server, which allows an authorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when ...
PT-2026-58123
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...
PT-2026-58505
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A double free issue exists in the Windows DHCP Server, which could allow an authorized attacker to execute arbitrary code over a network. A double free occurs when the program...