MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

CVE-2026-47717 FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...

ROOT-OS-UBUNTU-2204-CVE-2025-38348 CVE-2025-38348 in linux - Patched by Root

Root has patched CVE-2025-38348 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Malicious code in nihzvdeowx5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303f930ccf841284aaa263af6244d308d3bfd0d83b5af6ae037ff634f2518d94 The package contains only index.html declared as main in package.json and no JavaScript entry point, lifecycle scripts, or other module code. The HTM...

Malicious code in jhkxcixudnvm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecafeb32fc0bc6beb0fcd9f6cab36efa71c8e69dc966271eea55bd03ba8eadf The package contains only package.json and index.html, with index.html declared as main. The HTML imitates a Cloudflare 'Just a moment...' verificati...

Malicious code in dhjksficgwu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dc64d0022ee36cd898963db50e3c835990bf94837821fb34408820855c69c0 Package contains a single index.html file declared as main. The HTML impersonates a Cloudflare Turnstile 'Just a moment...' verification page sitekey...

Malicious code in bmgki3g6fh3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9212dc22bc5983b7b163b7851e76596bda812485709581a8dd61475630db4450 The package contains a single file, index.html, declared as main. The page renders a spoofed Cloudflare 'Just a moment...' / Turnstile 'security...

WordPress Ninja Tables Pro plugin 5.2.11 - Backdoor vulnerability

Backdoor vulnerability discovered by ? in WordPress Plugin Ninja Tables Pro versions 5.2.11...

BELL-CVE-2026-68332 CVE-2026-68332 does not affect BellSoft software

Bulletin has no description...

CVE-2026-71436 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-62714

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:36+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:17+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:33+00:00| seen|...

CVE-2026-70329

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:14+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:10+00:00| seen|...

CVE-2026-20886

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20755

Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20765

Incorrect comparison for some IntelR TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentiall...

UBUNTU-CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-62839

CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

EUVD-2026-56497

Uncontrolled resource consumption for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-20763

The CVE concerns Intel TDX Guest software prior to version 0.3.1, where an incorrect calculation in Ring 3: User Applications may enable local privilege escalation. The issue is triggered by a privileged system software actor with high privileges and no user interaction, leading to potential low ...