CVE-2026-57432

A flaw was found in Perl. An integer overflow vulnerability in the Smeasurestruct function, specifically when handling pack and unpack templates with large repeat counts, can lead to an out-of-bounds heap read. This allows an attacker, by providing a specially crafted template, to read sensitive...

CVE-2026-57432

Perl versions through 5.43.10 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the...

Security update for grafana

This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...

EUVD-2026-4126

Directory Traversal vulnerability in Beam beta9 v.0.1.552 allows a remote attacker to obtain sensitive information via the joinCleanPath function...

EUVD-2026-2985

Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-2487

In the Linux kernel, the following vulnerability has been resolved: erspan: Initialize optionslen before referencing options. The struct iptunnelinfo has a flexible array member named options that is protected by a countedbyoptionslen attribute. The compiler will use this information to enforce...

CVE-2025-67725

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation...

Apache HTTP Server 安全漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A security vulnerability exists in Apache HTTP Server versions 2.4.30 through 2.4.66 and earlier, which can be exploited by an...

Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-commitlint-convict-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2449140152499149dd95c33f0f0d29f117d403a9f79b762502ec4458506a0938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188990 Malicious code in pyxis-hercules-scripts-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a81f666995ddc6c6187d95530b91ea605e66fd4709f426879c3d30977691f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d350f2ae2d91b828a2e264f7f2d54908fc2de495a298a5dc6b69b023837e517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154277 Malicious code in demdadf-sadudar-adatsaopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507dfe3efe1cb1e9a942b1e654ecbeefc00209193d7f09826c0c23a4057fdeaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7facfac68a48f7c0ef2e55a950e61229cdefede435e79093261de987f8424f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibon-aguphupabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d842eac694080298240a5df69a570edad0bc75ed18a172f994a96f49a58a7ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162885 Malicious code in nokire-loklok32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf974dca97f88483299d85096ee75dada739746a715bf1cb71a145f9b38124a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62511b0d48a26de2fe6de5cbf541d8607c04e63b3aa7afabb41e02b2d98e21a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150594 Malicious code in @miptaa02/etdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac711deb1e77f1f916ff0043ea52801e519d0d2f7ec8fdd1b2e38ddf5088bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151506 Malicious code in abiuna-mobialue-amasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05377cce9d775c6d56700292945e539178120a4c7d8ae335adbbdf9b64eeb38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147070 Malicious code in react-bootstrap-perseus-loop-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61172e3c6854cb76a038cf824b66df090e14de7ea249bac4f0599eb783a7758e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...