67186 matches found
CVE-2026-80174
Dell Secure Connect Gateway (SCG) 5.0 — both the Appliance and Application editions — contains an Insufficient Session Expiration vulnerability. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) allow a low-privileged attacker with remote access to exploit the flaw and perform...
CVE-2026-80174
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to session theft...
EUVD-2026-74792
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to session theft...
CVE-2026-80174
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to session theft...
CVE-2026-79696
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
CVE-2026-79696
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
CVE-2026-79696
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
EUVD-2026-74768
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
CVE-2026-79696
Google Cloud Agent Development Kit (ADK) for Python (versions 2.0.0 through 2.6.0) contains a code injection vulnerability in the adk web component caused by an incomplete standard library denylist . In environments where pytest is installed—on Python (OSS), Cloud Run, and GKE—an unauthenticated ...
Malicious Package
Overview express-session-timer is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of...
MAL-2026-16070 Malicious code in @fyxzpediaa/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0747ec3c1ce519798cac2e89f8ec1e1532d428355a13929f0176a11d77a2b175 This fork of Baileys injects a covert remote-directed action into the WhatsApp socket. On every WebSocket connection, socketConnect reconstructs a UR...
Malicious code in express-session-timer (npm)
Source: amazon-inspector 325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f [email protected] schedules an unconditional destructive routine at module load time. Approximately 18 seconds after require'express-session-timer', the package recursively removes /src via...
CVE-2026-13359
The Contact Form to DB by BestWebSoft WordPress plugin (versions up to and including 1.7.5 ) is vulnerable to unauthenticated Stored Cross-Site Scripting via the cntctfrm_contact_dropdown parameter, caused by insufficient input sanitization and output escaping. An attacker can inject a payload by...
CVE-2026-13359 Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrmcontactdropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes...
CVE-2026-13359 Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrmcontactdropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes...
EUVD-2026-74566
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrmcontactdropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes...
CVE-2026-87626
An incorrect authorization flaw was found in the DeviceBoundSessionCredentials component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553155590...
Malicious code in express-session-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f [email protected] schedules an unconditional destructive routine at module load time. Approximately 18 seconds after...
MAL-2026-16065 Malicious code in express-session-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f [email protected] schedules an unconditional destructive routine at module load time. Approximately 18 seconds after...
