CVE-2026-57587

A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data...

Ingram-Pro

Ingram-Pro Network Camera Vulnerability Scanner Enhanced E...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

🚨 CVE-2024-4367 - Universal PDF.js Vulnerability Scanner...

Linux Distros Unpatched Vulnerability : CVE-2026-53052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: qcom: qdsp6: topology: check widget type before accessing data Check widget type before accessing the private data, as this could a virtual widget which i...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, tekton-pipelines-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, tekton-pipelines-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, upwind-agent,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

Linux Distros Unpatched Vulnerability : CVE-2026-46417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12,...

CVE-2025-71344

picklescan before 0.0.30 affected versions 0.0.26 and earlier fails to detect the ensurepip.runpip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip.runpip calls in reduce methods bypass picklescan detection and...

CVE-2025-71358 picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity

picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.getentity function in reduce methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when loaded by victims using pickle.load...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2025-71348 picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils.configmodule.loadconfig function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply...

@openinc/parse-server-opendash (>=4.0.0, <=4.0.29) potentially affected by CVE-2026-53726 via parse-server (>=9.6.0-alpha.37, <=9.8.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.29 Source cves: CVE-2026-53726 Source advisory: OSV:GHSA-WMWX-JR2P-4J4R...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

@aegis-scan/core (>=0.18.1, <=0.19.0), @aegis-scan/reporters (>=0.18.4, <=0.19.0) +382 more potentially affected by CVE-2026-9697 via undici (>=7.24.0, <=7.27.2)

undici NPM version =7.24.0, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.8, =0.1.7, =21.2.4, =21.2.4, =0.1.0, =0.18.0, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-9697 Source advisory: SNYK:JS-UNDICI-17372609...

CVE-2026-53872

picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers can bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to externa...