RHEL 9 : thunderbird (RHSA-2026:38750)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:38750 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape in the DOM: Workers...

bokcolmaps (0.3.1), bokodapviewer (0.1.3) +2 more potentially affected by CVE-2026-21883 via bokeh (0.12.6)

bokeh PYPI version 0.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - bokcolmaps 0.3.1 - bokodapviewer 0.1.3 - pandexo-engine =1.5.1, =0.1.0, =0.1.2 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1223...

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

A Russian advanced persistent threat APT group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian cybersecurity company ESET said it observed 35 distinct spear-phishing campaigns mounted by Gamaredon against new...

bokcolmaps (0.3.1), bokodapviewer (0.1.3) +2 more potentially affected by CVE-2026-21883 via bokeh (0.12.6)

bokeh PYPI version 0.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - bokcolmaps 0.3.1 - bokodapviewer 0.1.3 - pandexo-engine =1.5.1, =0.1.0, =0.1.2 Source cves: CVE-2026-21883 Source advisory: OSV:GHSA-793V-589G-574V...

EUVD-2015-5611

Malware in sbrugna...

EUVD-2022-43082

Malicious code in bioql PyPI...

Malicious code in met-continued-sand (npm)

The package met-continued-sand was found to contain malicious code...

MAL-2025-45179 Malicious code in met-continued-sand (npm)

The package met-continued-sand was found to contain malicious code...

sequinsandsand.com.au Cross Site Scripting vulnerability OBB-3885189

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BIT-GITLAB-2022-3726

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick a user to click on the Swagger OpenAPI viewer and issue HTTP requests that affect the victim's account...

heinz-kies-sand.de Cross Site Scripting vulnerability OBB-3721948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick a user to click on the Swagger OpenAPI viewer and issue HTTP requests that affect the victim's account...

CVE-2022-3726

GitLab CVE-2022-3726 affects GitLab CE/EE, with no sandboxing of OpenAPI/Swagger viewer. Affected versions are 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. The vulnerability allows an attacker to trick a user into clicking the Swagger OpenAPI viewer, causing HTTP requests...

CVE-2022-3726

Removed by vendor...

CVE-2022-3726: Undefined Security Weakness

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick a user to click on the Swagger OpenAPI viewer and issue HTTP requests that affect the victim's account...

CVE-2022-3726

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick a user to click on the Swagger OpenAPI viewer and issue HTTP requests that affect the victim's account...

pylcurves (>=0.0.2, <=0.0.2.1), pypletics (>=0.0.4.2, <=0.0.4.8) +1 more potentially affected by CVE-2020-13091 via pandas (0.20.2)

pandas PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on pandas and may be impacted: - pylcurves =0.0.2, =0.0.4.2, =0.1.0, =0.1.2 Source cves: CVE-2020-13091 Source advisory: OSV:PYSEC-2020-73...

Empires of Sand TD - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Empires of Sand TD published at the 'play' market has multiple vulnerabilities...

Sand Hourglass - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Sand Hourglass published at the 'play' market has multiple vulnerabilities...

AirDroid Patches Vulnerability Exposing Android Data

A critical vulnerability impacting 50 million Android users running the popular AirDroid application has been patched. AirDroid, an app that allows you link an Android device to a computer and send SMS messages, run apps and add contacts via a Wi-Fi connected web browser, released the patch Jan...