Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection

Lantronix PremierWave 2050 8.9.0.0R4 contains an OS command injection vulnerability. A specially-crafted HTTP request can lead to command in the Web Manager Wireless Network Scanner. An attacker can make an authenticated HTTP request to trigger this vulnerability. id: CVE-2021-21881 info: name:...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

CVE-2026-59881 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kserve, dask-kubernetes, apache-beam-python-3.12-sdk, airflow, puppygraph-python, apache-beam-python-3.13-sdk, text-generation-inference, airflow-core, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app...

Exploit for Interpretation Conflict in Wordpress

wp2exp2026 🔥 WordPress All-in-One Exploit Framework — De...

guardx

🛡️ Guard Toolkit — Full Tutorial Security toolkit: Secret S...

CVE-2026-62416

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and uploa...

CVE-2026-62416

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and uploa...

CVE-2026-62416

The CVE-2026-62416 entry concerns Sharp Corporation’s Network Scanner Tool and Network Scanner Tool Lite configured with no authentication, allowing unlimited file uploads over the network. The underlying issue enables an unauthenticated attacker to connect and upload files, potentially causing d...

EUVD-2026-52252

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and uploa...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

Exploit for CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...

Malicious code in iac-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90ccff89d665d28ad35ad8c285427a56af2c0d5862b432a7de604a99a0358d9 lib/report.js imports childprocess, fs, https, and os, collects host identity via os.hostname and os.userInfo, executes local commands via execSync,...

MAL-2026-11467 Malicious code in iac-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90ccff89d665d28ad35ad8c285427a56af2c0d5862b432a7de604a99a0358d9 lib/report.js imports childprocess, fs, https, and os, collects host identity via os.hostname and os.userInfo, executes local commands via execSync,...

kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

A resource exhaustion vulnerability was found in the Kernel Same-page Merging KSM subsystem of the Linux kernel. When scanning processes with large sparse virtual memory mappings e.g., 32 TiB with one mapped page, ksmd inefficiently walks every address rather than skipping unmapped holes. This...