12957 matches found
CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
Adalo Database API Enables Cross-App User Data Extraction via Over-Fetching and Missing Authorization Controls
Overview Adalo’s no‑code application platform exposes complete user records through its database API for all applications built on both V1 and V2. Due to a platform-level flaw, authenticated users can retrieve full user data belonging to any Adalo application, regardless of configuration. This...
Foxit PDF Reader for Mac < 2026.1.2 Multiple Vulnerabilities
According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on th...
PYSEC-2026-1925 SKOPS Card.get_model happily allows arbitrary code execution
Summary The Card class of skops, used for model documentation and sharing, allows arbitrary code execution. When a file other than .zip is provided to the Card class during instantiation, the internally invoked Card.getmodel method silently falls back to joblib without warning. Unlike the .skops...
PYSEC-2026-1973 TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
In the latest version of pytorch/serve, the script 'uploadresultstos3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not...
Malicious code in zircuit-vault (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rezactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reuactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rearctjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7365 Malicious code in react-datepicker-next (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-store-basket-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in axgularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angvlarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulaljs (npm)
--- -= Per source details. Do not edit below this line.=-...