Malicious code in 3layerdipstack1lkqg9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3055362817a22386f2c0e5db959db42444b9c60d620c9c8453ee196a1d0e8fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14596 Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkaw1i8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a481301975d70f149e4948a37b36cbe5e70ac46ada2e81c66b17215332b538 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackic0c5r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b070b5251c31e35e45c2f6c010c09c7340108089615d68b254d84da1abface4c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack8xhwdm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb57760067d22b8d95fed83ab820f3c63a22e6f7f8d08a1d2fa9bef5810259f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14808 Malicious code in 3layerdipstackkysrek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d1f569a2e645d005f3e8dd8f757dfa4b26f11d80dbea28773cf8528c0501af The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

WordPress Library Management System plugin < 3.6.7 - Subscriber+ SQL Injection via Filter Value vulnerability

Subscriber+ SQL Injection via Filter Value vulnerability discovered by João Ramos Maciel in WordPress Plugin Library Management System versions 3.6.7...

CVE-2025-49132

CVE-2025-49132 — RCE di Pterodactyl Strumento di exploit per CVE-2025-49132 — una vulnerabilità critica di esecuzione arbitraria di codice non autenticata che colpisce il pannello del server di gioco Pterodactyl. 🧠 Cos'è CVE-2025-49132 ? Una falla ACE critica nel pannello Pterodactyl che consente...

PT-2026-83320

Name of the Vulnerable Software and Affected Versions IBM Integrated Analytics System versions 1.0.0.0 through 1.0.31.0 Description The system fails to properly validate TLS certificates. This flaw allows an attacker to perform man-in-the-middle techniques to intercept and obtain sensitive...

USN-8661-3: Linux kernel vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8643-5: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...

CVE-2026-54721

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

EUVD-2026-67161

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

EUVD-2026-67141

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxies every /api request to the...

CVE-2026-80551

A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises because the system does not ensure that the address in the first Indirect Data Address Word IDAW remains constant between reads. An attacker could potentially exploit this to cause the system to operate with ...

EUVD-2026-67130

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

ROOT-OS-DEBIAN-12-CVE-2024-2236 CVE-2024-2236 in libgcrypt20 - Patched by Root

Root has patched CVE-2024-2236 in the libgcrypt20 package for Root:Debian:12. Multiple fixed versions available...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Salon booking system versions = 10.31.1...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions = 10.31.1...