CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

Malicious code in yunxohang5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...

MAL-2026-185 Malicious code in yunxohang5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...

MAL-2026-186 Malicious code in yunxohang6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330a33730fe31c0ddee057fe9fa709d90447db3692211537a9570f70451e64a6 The package yunxohang6 was found to contain malicious code. Source: ghsa-malware 3f00c325c438e731f2f5c0a66e4135cf7e682994875cdc4e2df8dbffbdb299f6 Any...

MAL-2026-182 Malicious code in yunxohang10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afa709f3be67acbb1d69b61e6897f6743d7feb8f9cb31e8b0109223c403858c The package yunxohang10 was found to contain malicious code. Source: ghsa-malware 5d4bc174ce0500df2bcfb0be9787d728083db08a933b9eb56bbe52e1cf37bfd1 An...

GHSA-3C6G-7V4G-5XCM vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2026-21860

Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safejoin function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present...

USN-7949-1: Sodium vulnerability

It was discovered that Sodium incorrectly handled the elliptic curve point validity check in certain atypical use cases. This could result in invalid points being used, contrary to expectations...

CVE-2025-66002

An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...

CVE-2025-67603

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31...

CVE-2025-66002

An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...

MAL-2026-155 Malicious code in shaktihacker2026 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cb6457a3349374a4197b81f898e8188fd1fa57b63d5d1585e4f06ddca09316 The package shaktihacker2026 was found to contain malicious code. Source: ghsa-malware 8576dcfc2ee1fd97abb2cb2200663eea4537f4a39053e01984a915f8b570d2...

CVE-2025-61594 vulnerabilities

Vulnerabilities for packages: jruby, ruby...

GHSA-J4PR-3WM6-XX2R vulnerabilities

Vulnerabilities for packages: jruby, ruby...

Exploit for Uncontrolled Search Path Element in Checkmk

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access...

GHSA-J4PR-3WM6-XX2R vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby, truffleruby...

MAL-2026-151 Malicious code in svelte-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822b182580c298051b9c1f8bb1e807bdb6c780fce64845002feebe37eddd0fad The package svelte-monorepo was found to contain malicious code. Source: ghsa-malware 1f5c5e96c4223fbe3046df01f3cda3aa9b821888050b45d82e92688609a7284...

MAL-2026-152 Malicious code in week-4-node-modularization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0183bf3fb4823612b5a0668f2fc3e58fe3de5ee161fa9acd80244e0400dc40b9 The package week-4-node-modularization was found to contain malicious code. Source: ghsa-malware...

SUSE CVE-2025-15079

When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file...

SUSE CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon's log settings.This issue affects TLP: from 1.9 before 1.9.1...