319650 matches found
MSC-2026-5542
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
MSC-2026-5536
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
MSC-2026-5537
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
MSC-2026-5540
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
MSC-2026-5541
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems
Update May 14, 2026: CISA has updated this Alert to include additional vulnerabilities, CVE-2026-20133 and CVE-2026-20182 and associated resources. The purpose of this Alert is to provide resources for organizations with Cisco Software-Defined Wide-Area Networking SD-WAN systems, including Federa...
MSC-2026-5534
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
How Dangerous Is Anthropic’s Mythos AI?
Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not release it to the general public. Instead, it would only be available to a select group of companies to scan a...
CVE-2026-2347
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website: before 4.5.001...
WS-2019-0466
All versions of this package contains malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0446
malicious-do-not-install v1.0.0 contain malicious code. The package copies the contents of /etc/passwd and /etc/shadow to files in the local /tmp/ folder...
MSC-2026-5528
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
WPS Office improper access restriction to its named pipe
Overview WPS Office provided by WPS SOFTWARE PTE. LTD. contains a service program running background and providing certain functionalities to the other programs. This service program uses a named pipe to communicate with the other programs. The named pipe above is not properly protected and any...
WS-2019-0238
serve versions before 10.1.2 are vulnerable to Path Traversal when Explicitly ignored folders can be accessed through relative paths,...
WS-2019-0220
zero versions before 1.0.6 are vulnerable to path traversal because of insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files...
BELL-CVE-2026-43477
Bulletin has no description...
BELL-CVE-2026-43479
Bulletin has no description...
BELL-CVE-2026-43481
Bulletin has no description...