CVE-2026-109664

Frappe ERPNext before 15.112.0 contains a missing authorization vulnerability that allows authenticated users with a common operational role to modify records beyond their permissions due to missing validation in certain endpoints. Attackers holding this role can call the affected endpoints to...

Malicious code in magellan-bootes-resonance-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8b4773259d5547357d870a866f9e7006b8eb86df99ec58fbc123d7da10ffd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Update for Exchange 2000 Server (KB906780)

A security issue has been identified that could affect your Exchange 2000 Server system in the following way: 1. Denial of Service 2. Elevation of Privilege 3.Tampering with Data 4. Information Disclosure . We recommend that you install this update on all Microsoft Exchange 2000 servers in your...