MAL-2026-6209 Malicious code in @antoncarlos1/nodelamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d930df8b6392b3bbfe3b591d90226374d31fb246e06018521f3f673a815b618a @antoncarlos1/[email protected] ships a single obfuscated index.js that runs a dropper on require. The top-level IIFE constructs a hardcoded IPv4 URL by...

Malicious code in edison-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c151a181047e12f1de0e91b1923861446b04558028d518e30df1767ccc85def7 At pip install time, setup.py reads the EDISONQUERY environment variable from the installer's environment and POSTs it to...

MAL-2026-4485 Malicious code in atel-mcp-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...

EUVD-2026-28688

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnllock ELP metric worker batadvvelpgetthroughput might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via canceldelayedworksync in...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010804 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...

WireMCP 操作系统命令注入漏洞

WireMCP is a real-time network traffic analysis tool developed by Koda’s individual developers. WireMCP has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on the server.tool function in the Tshark CLI Command Handler component,...

CVE-2025-40280

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of tipcnetnet-monitors in tipcmonreinitself. 0 The array is protected by RTNL, but tipcmonreinitself iterates over it without RTNL. tipcmonreinitself i...

PT-2025-46595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to USB runtime power management PM and Real-Time Network Layer RTNL interactions with the AX88772 network adapter. The issue arises when runtime...

PT-2025-30874

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the atm/clip subsystem where a null pointer dereference may occur in the to atmarpd function. This issue arises because to atmarpd can be called witho...

Important: Red Hat Security Advisory: ACS 4.4 enhancement and security update

Important: Updated images are now available for Red Hat Advanced Cluster Security. Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes new features and bug fixes. This release includes the following features and updates: New Compliance capabilities...

Wuxi Time Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...

SQL Injection Vulnerability in pr***.asp Page of Time Network Website Builder System

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...

SQL Injection Vulnerability in ne***.asp Page of Time Network Website Builder System

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...

Wuxi Time Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...

How Credit Unions Can Optimize & Secure the Mobile App Experience

A small army of digital natives are about to become the largest generation globally. Gen Z, those born after 1996, will account for 32% of the world's population 7.7 billion in 2019 and outnumber millennials for the first time, according to World Economic Forum. This year, it will be critical for...

Cyber Probe - Capturing, Analysing and Responding to Cyber Attacks

Cyberprobe is a distributed software architecture for monitoring of networks against attack. It consists of two components: cyberprobe, which collects data packets and forwards them over a network in standard streaming protocols; and cybermon which decodes protocols, and invokes user-defined logi...

Real Time Network Monitoring: Cyberprobe

Real Time Network Monitoring Cyberprobe is a distrbuted architecture for real-time monitoring of networks against attack. The software consists of a number of components, including: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, whi...