44264 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-3644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were n...
Linux Distros Unpatched Vulnerability : CVE-2026-32777
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat before 2.7.5 allows an infinite loop while parsing DTD content. CVE-2026-32777 Note that Nessus relies on the presence of the package as reported by th...
MAL-2026-1505 Malicious code in transform-jscript (npm)
The package 'transform-jscript' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
MAL-2026-1550 Malicious code in syntax-export-extensions (npm)
The package 'syntax-export-extensions' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
Malicious code in transform-simplify-comparison-operators (npm)
The package 'transform-simplify-comparison-operators' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2...
Malicious code in minify-mangle-names (npm)
The package 'minify-mangle-names' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
MAL-2026-1526 Malicious code in prefer-let (npm)
The package 'prefer-let' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...
MAL-2026-1554 Malicious code in typescript-validation-schema (npm)
The package 'typescript-validation-schema' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2026-1511)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-kas, gitlab-runner...
CVE-2026-3922 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3923 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3935 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3938 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G9F5-PWQF-9XC6 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3919 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3920 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3940 vulnerabilities
Vulnerabilities for packages: chromium...
