CVE-2026-2869

CVE-2026-2869 affects janet-lang/janet up to 1.40.1. The exposed vulnerability is in the function janetc_varset within src/core/specials.c of the handleattr Handler, leading to an out-of-bounds read. Exploitation is local-only; the exploit is publicly available. Mitigation is upgrading to version...

PT-2026-21378

Name of the Vulnerable Software and Affected Versions janet-lang versions prior to 1.41.0 Description A flaw exists in the janet-lang software, specifically within the janetc varset function located in the src/core/specials.c file, part of the handleattr Handler component. This issue can lead to ...

CVE-2026-2242 janet-lang janet specials.c janetc_if out-of-bounds

A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetcif of the file src/core/specials.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This...

CVE-2026-2242

CVE-2026-2242 affects janet-lang up to 1.40.1. The vulnerability lies in janetc_if within src/core/specials.c, allowing a local out-of-bounds read due to manipulation. An exploit has been publicly disclosed and a patch identified by the commit c43e06672cd9dacf2122c99f362120a17c34b391 is available...

UBUNTU-CVE-2025-6589

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: = 1.42.0...

PT-2024-22212

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

CVE-2023-5112

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "specialstypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-31768 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the specials type name1 parameter. This could potentially lead to unauthorized...

Malicious code in @specials/resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2350d290f451ccf7a0db726a0286787fd8de1e7fc0d554d64d29446f08592fcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/request-tinkoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70950da2d6265fb0f361f58470cdf72dd46749320aec9096e763b16815dedeaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-604 Malicious code in @specials/resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2350d290f451ccf7a0db726a0286787fd8de1e7fc0d554d64d29446f08592fcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-598 Malicious code in @specials/ib-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30e0d933078498a76da5a427205cc4a746095b8da74087d645cc41abcee0ab08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/obid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bb6b9439609ed08b0cd6b225dec62445e017f8b2130faf5fe7ebf9ddf39db39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-602 Malicious code in @specials/obid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bb6b9439609ed08b0cd6b225dec62445e017f8b2130faf5fe7ebf9ddf39db39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-599 Malicious code in @specials/iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b999189e0dfecb715deb8b585ae03c3937667b023e07b8ea37c716d8209c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-605 Malicious code in @specials/socials-sharing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d94ced380ae9fefe77feed406021d43c6a06587940baaea2b8734812bac269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-600 Malicious code in @specials/localstorage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78321fadd6fcf17baa2b1cf2acbc2492ce5bca353293bff20be8b751fed59714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/localstorage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78321fadd6fcf17baa2b1cf2acbc2492ce5bca353293bff20be8b751fed59714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/socials-sharing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d94ced380ae9fefe77feed406021d43c6a06587940baaea2b8734812bac269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-597 Malicious code in @specials/form-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c33ab7327a7a4e72915d6e97a8163ec03b0b0d0b39d02ef1b712ff2e3db941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...