277949 matches found
CVE-2026-70485 Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Open WebUI checked whether a user-supplied URL destination was globally routable by applying ipaddress.isglobal to the literal IPv6 address without examining IPv4 addresses embedded in...
Malicious code in @servicetitan/microfront-tests (npm)
npm/@servicetitan/microfront-tests is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @servicetitan/acquisition-functions (npm)
npm/@servicetitan/acquisition-functions is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...
MAL-2026-11841 Malicious code in @servicetitan/contentful (npm)
npm/@servicetitan/contentful is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CLSA-2026-1784596277 TuxCare security update for qs (5 CVEs)
TuxCare rebuilt qs to address 5 CVEs. Fixed in 2.2.4-tuxcare.1...
CLSA-2026-1780620677 TuxCare security update for csvtojson (2 CVEs)
TuxCare rebuilt csvtojson to address 2 CVEs. Fixed in 2.0.8-tuxcare.1...
CLSA-2026-1776731780 TuxCare security update for sockjs (4 CVEs)
TuxCare rebuilt sockjs to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1776299672 TuxCare security update for postcss (3 CVEs)
TuxCare rebuilt postcss to address 3 CVEs. Fixed in 7.0.14-tuxcare.1...
CLSA-2026-1774484503 TuxCare security update for minimatch (17 CVEs)
TuxCare rebuilt minimatch to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...
CLSA-2026-1774743812 TuxCare security update for hawk (19 CVEs)
TuxCare rebuilt hawk to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773015258 TuxCare security update for hawk (3 CVEs)
TuxCare rebuilt hawk to address 3 CVEs. Fixed in 3.1.0-tuxcare.1...
CLSA-2026-1773101683 TuxCare security update for form-data (3 CVEs)
TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.2.0-tuxcare.1...
CVE-2026-67195
CVE-2026-67195 describes a remote code execution in Perspective 5.0.0 via an eval() expression injection in the PolarsVirtualServer backend. The vulnerability occurs when client-supplied input is passed directly to Python’s eval() with almost no sandboxing (builtins cleared). Attackers can traver...
CVE-2026-10710
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2026-10710
Summary: CVE-2026-10710 involves a stack-based buffer overflow in Autodesk FBX SDK, specifically in the fbxsdk::ExtractDrive path when parsing a malicious FBX file. The NVD/CVE records describe that exploitation can allow arbitrary code execution in the context of the current process, with a CVSS...
CVE-2026-10710 FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
EUVD-2026-52669
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2026-10709
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...
