43616 matches found
EUVD-2026-52965
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...
Linux Distros Unpatched Vulnerability : CVE-2026-64567
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight fro...
CVE-2026-18411: Use of Hard-coded Cryptographic Key
The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, potentially allowing unauthorized access...
Linux Distros Unpatched Vulnerability : CVE-2026-67590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid...
Linux Distros Unpatched Vulnerability : CVE-2026-42170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets ...
GHSA-94P8-87FF-W336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-8XCM-R25X-G524 vulnerabilities
Vulnerabilities for packages: pulumi, npm, renovate, prism, saf, vitess, code-server, langfuse...
Iran Cyberattacks Against Minnesota Water Systems
Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn't believe it's Iran and thinks Minnesota…I guess…hacked itself. "I think I blame it on Minnesot...
CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
python-pillow: Pillow: Denial of Service via crafted PCF font data
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...
Malicious code in @jsimplify/errno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb95765882f33f9d81fcfd6fe88ba4c274421923511121b7e9413e77c1dc69d The package declares a scripts.install hook that spawns bun index.js detached and unref'd on npm install, and pulls in bun as a declared dependency t...
CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
CVE-2026-13697 vulnerabilities
Vulnerabilities for packages: langfuse-fips, vitess, renovate, kibana, code-server, langfuse, pelias-api...
GHSA-4CWX-7WF7-3272 vulnerabilities
Vulnerabilities for packages: langfuse-fips, vitess, renovate, kibana, code-server, langfuse, pelias-api...
CVE-2026-16728 vulnerabilities
Vulnerabilities for packages: langfuse-fips, actions-runner, saf, vitess, renovate, npm, kibana, pulumi, code-server, prism, langfuse, pelias-api...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: langfuse-fips, actions-runner, saf, vitess, renovate, npm, kibana, pulumi, code-server, prism, langfuse, pelias-api...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55403 vulnerabilities
Vulnerabilities for packages: label-studio...