Malicious Package

Overview sap-quarterly-report is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-81674

creationtimestamp| type| source ---|---|--- 2026-08-27 14:08:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2zj2yv4x2u 2026-08-28 06:20:23+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4pspwkp72t...

CVE-2026-74233

creationtimestamp| type| source ---|---|--- 2026-08-27 14:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t 2026-08-27 16:29:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168418324906939 2026-08-27 17:00:45+00:00| seen|...

Malicious code in sap-quarterly-report (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2235bdf8263c08fede094c665d2fbc4e023a0f0c5e99631d70ae0685567b37ec During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-14556 Malicious code in sap-quarterly-report (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2235bdf8263c08fede094c665d2fbc4e023a0f0c5e99631d70ae0685567b37ec During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

SUSE CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-47666

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk4xs4wc2r...

PT-2026-82853

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

PT-2026-82854

A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-70419

creationtimestamp| type| source ---|---|--- 2026-08-26 20:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4pern6f22 2026-08-26 20:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtz54ufstr25 2026-08-27 02:21:53+00:00| seen|...

CVE-2026-80428

creationtimestamp| type| source ---|---|--- 2026-08-26 18:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722 2026-08-26 18:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y 2026-08-29 15:20:12+00:00| seen|...

Exploit for CVE-2026-79266

Chrome Vulnerability Scanner A lightweight, dependency-free...

CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-80569

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

AZL-97703 CVE-2026-80570 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

AZL-97803 CVE-2026-80569 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...