44264 matches found
PT-2026-39764
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iOS versions prior to 26.4 iPadOS versions prior to 18.7.7 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 tvOS versions...
CVE-2026-33412: Improper Neutralization of Special Elements used in an OS Command
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...
Vim 安全漏洞
Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0202 contained security vulnerabilities. These vulnerabilities were caused by command injection through the glob function on Unix-like systems, which could lead to the execution of arbitrar...
CVE-2026-33250
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player'...
GHSA-GCHP-Q4R4-X4FF vulnerabilities
Vulnerabilities for packages: wasmcloud, fnm, rustup, buck2, cargo-c, qdrant, sccache, wasm-pack, zizmor, deno, typst, pixi, rye, bootc, mise...
CVE-2026-33481 vulnerabilities
Vulnerabilities for packages: kubescape-operator, k9s, wolfictl, xeol, kubescape, zarf, guac...
Malicious code in pulse-rsvp-card-entity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d02d6daeedd5d906c300edc9ce1c430366876726cb5f6c69156b785a38713ad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pulse-shop-section (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9973ec50205f8457c7d27feb3e60011e3fe79d4e0d1b7cbeaa30bc38e98e9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ty-fragment-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88bca7665eab3ba9300549f837880aea1567494c90187abacee03c85eaeb99e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-QPXP-75PX-XJCP vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in a Command (CVE-2024-14026)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...
Malicious code in @airtm/uuid-base32 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5843013e1c89122451c17ec535f73c4e36dc3596c32522dd9b03bbb68637c4f3 The package @airtm/uuid-base32 was found to contain malicious code. Source: ghsa-malware...
Malicious code in @emilgroup/claim-sdk-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875cfffc40fe2f586c2016b175709687e5644132193d058580c55b789f64482 The package @emilgroup/claim-sdk-node was found to contain malicious code. Source: ghsa-malware...
MAL-2026-2050 Malicious code in @emilgroup/insurance-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204ac599e2496ac1b276283252ae142c05b28ebf89e2f63d3a0c664f2ccac7af The package @emilgroup/insurance-sdk was found to contain malicious code. Source: ghsa-malware...
Malicious code in @emilgroup/insurance-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204ac599e2496ac1b276283252ae142c05b28ebf89e2f63d3a0c664f2ccac7af The package @emilgroup/insurance-sdk was found to contain malicious code. Source: ghsa-malware...
Malicious code in @emilgroup/gdv-sdk-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f423945b0d9a114bae821ae46ab06d9850ba5611917eb80d940c47771e3ed The package @emilgroup/gdv-sdk-node was found to contain malicious code. Source: ghsa-malware...
Malicious code in react-leaflet-cluster-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0518fae392cbcd2e3f43b08af24b6736a313bcc053d67bfece2c36c7e609373 The package react-leaflet-cluster-layer was found to contain malicious code. Source: ghsa-malware...
SUSE CVE-2026-33412
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...