EUVD-2026-3751

Malicious code in chai-chain-async npm...

EUVD-2026-3758

Malicious code in @mikudev/ridwan-signal npm...

CVE-2026-21990

...

CVE-2026-21987

CVE-2026-21987 affects Oracle VM VirtualBox (Core) with affected versions 7.1.14 and 7.2.4. The vulnerability is described as exploitable by a high‑privilege attacker who has logon to the infrastructure where VirtualBox runs, with local attack vector and impacts to confidentiality, integrity, and...

CVE-2026-21983

...

CVE-2026-21982

CVE-2026-21982 affects Oracle VM VirtualBox Core in the Oracle Virtualization product. Affected versions are 7.1.14 and 7.2.4. The issue allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running VirtualBox to compromise the software, pot...

CVE-2026-21981

...

CVE-2026-21974

...

CVE-2026-21970

...

CVE-2026-21966

...

CVE-2026-21938

...

CVE-2026-21934

...

CVE-2026-21932

...

PSF-2026-6

User-controlled header names and values containing newlines can allow injecting HTTP headers...

CVE-2025-67473

creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:09+00:00| seen| Telegram/94xF8qOf6a9zFTfjcIBBKIfclAWvX8OYrbzJopUPnpCqSjk...

CVE-2025-9281

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device reboots...

CVE-2025-14377

CVE-2025-14377 concerns the legacy Ansible playbook component of Verve Asset Manager. The issue arises from plaintext secrets being stored during playbook execution. This component has been retired and has been optional since the 1.36 release in 2024. The CVSS v4.0 score is 8.8 (HIGH), with netwo...

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

MiracleLinux 7 : firefox-115.10.0-1.0.1.el7.AXS7 (AXSA:2024-7697:15)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7697:15 advisory. GetBoundName in the JIT returned the wrong object CVE-2024-3852 Out-of-bounds-read after mis-optimized switch statement CVE-2024-3854 Incorrect...

PT-2026-3562

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...