CVE-2026-61098

...

CVE-2026-60852

...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...

CVE-2026-60689

Summary : CVE-2026-60689 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) in versions 22.3–26.5. It allows an unauthenticated, network-accessible attacker (via HTTP) to compromise the system, potentially enabling unauthorized access to critical data or complete access to all Si...

CVE-2026-60465

...

CVE-2026-60327

...

CVE-2026-60230

...

CVE-2026-47040

...

CVE-2026-46803

Technical details about CVE-2026-46803 are not provided in the supplied documents. No affected products, root cause, or remediation are disclosed. Monitor for updates in the CVE record and connected feeds.

Malicious Package

Overview @t-in-one/addapplicationservicetoken is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

CVE-2026-35277

CVE-2026-35277 affects Oracle REST Data Services (Core). Affected versions: 24.2.0–26.1.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTPS, potentially leading to unauthorized creation, deletion or modification of data, or unauthorized access to Oracle ...

Malicious Package

Overview @google-pay-trust/init-google-pay is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview changelog-cli-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-34305

...

Malicious Package

Overview @tushar-br/file11 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview json-lucide is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview yelp-react-component-badge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview yelp-react-component-rating is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview cryptopapi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via tools.exec.safeBins. An attacker can access sensitive files from the working directory by supplying a pattern input through the -e or --regexp fla...