Oracle Database Server (January 2026 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Spatial and Graph OpenJPEG component of Oracle Database Server. Supported versions that are affected are...

The vulnerability of the software for managing, controlling, and organizing printing processes in Vasion Print Virtual Appliance Host and Print Application, due to insufficient spatial separation, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to insufficient spatial separation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Bare Metal Operator (BMO) software, related to insufficient spatial partitioning, allows a attacker to disclose protected information.

The vulnerability of the Bare Metal Operator BMO software is related to insufficient spatial partitioning. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the data source plugin for open-source platforms for monitoring and surveillance by Grafana Databricks allows attackers to expose sensitive information.

The vulnerability of the data source plugin for open-source platforms for monitoring and observation by Grafana Databricks is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the data source plugin for open-source platforms for monitoring and surveillance by Grafana Databricks allows attackers to expose sensitive information.

The vulnerability of the data source plugin for open-source platforms for monitoring and observation by Grafana Databricks is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

CVE-2025-68280

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

Secure Wireless Communication Using Distributed Coherent Transmission and Spatial Signal Decomposition

We present a new approach to secure wireless communications using coherent distributed transmission of signals that are spatially decomposed between a two-element distributed antenna array. High-accuracy distributed coordination of microwave wireless systems supports the ability to transmit...

The vulnerability of Intel microprogramming software, related to insufficient spatial partitioning, allows attackers to enhance their privileges.

The vulnerability of Intel microprogramming software is related to insufficient spatial partitioning. Exploiting this vulnerability allows attackers to enhance their privileges...

The vulnerability of the FortiSandbox threat detection and mitigation system, related to insufficient spatial separation, allows a perpetrator to bypass the sandbox’s protective mechanisms.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to insufficient spatial separation. Exploiting this vulnerability could allow a malicious actor to bypass the sandbox’s protection mechanisms...

COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers

This paper studies how multimodal large language models MLLMs undermine the security guarantees of visual CAPTCHA. We identify the attack surface where an adversary can cheaply automate CAPTCHA solving using off-the-shelf models. We evaluate 7 leading commercial and open-source MLLMs across 18...

Malicious code in spatial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389e27ecf2f57391b9122a06b1b4ede3fff3841bdabe75a9e2d72ef849d715c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75578

Malicious code in spatialfalcon-appteadev npm...

EUVD-2025-80484

Malicious code in spatiallarkreplicateautomation npm...

EUVD-2025-80486

Malicious code in spatialgorillareplicateautomation npm...

EUVD-2025-80485

Malicious code in spatialjellyfish0xrequest npm...

MAL-2025-96699 Malicious code in spatial_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e815a6a45707de3eb807f6219084a75c58ba9168e86e6f760148e76dc4d4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51901

Malicious code in spatial-olive-mongoose npm...

EUVD-2025-51902

Malicious code in spatial-chocolate-smelt npm...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...