8411 matches found
CVE-2026-17038
DrEryk Gabinet versions prior to 11.5.0 embed hard-coded API credentials within its ticket reporting component. An attacker who discovers these credentials can authenticate directly to the ticket system API, bypassing the application's normal access controls and performing privileged operations s...
Copyright scammers get Instagram accounts suspended and demand payment
Scammers are abusing Meta's copyright-reporting system to suspend people's Instagram accounts and then hold them for ransom, according to the BBC. Criminals file fake copyright complaints with Instagram, claiming that an account is using material it doesn't own. Repeated complaints can trigger a...
Malicious Package
Overview @auction-fe/reporting-system is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the...
CVE-2026-17038: Use of Hard-coded Credentials
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
Malicious code in @auction-fe/reporting-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16108 Malicious code in @auction-fe/reporting-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-87911
creationtimestamp| type| source ---|---|--- 2026-09-09 21:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723 2026-09-09 21:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp 2026-09-09 23:10:05+00:00| seen|...
[SECURITY] Fedora 44 Update: complyctl-1.0.0-1.fc44
complyctl fetches Gemara policies from OCI registries, resolves dependency graphs, dispatches scans to providers via gRPC, and produces compliance reports EvaluationLog, OSCAL, Markdown, SARIF. Providers are distributed separately via the complytime-providers package...
CVE-2026-83996
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69684
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-69612
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69513
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69482
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
CVE-2026-69462
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69450
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69436
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69433
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...