95594 matches found
sharepoint-2026-poc
SharePoint /trust WS-Federation Deserialization — PoC & Det...
Malicious code in @antstackio/json-to-graphql (npm)
Source: amazon-inspector b8602af1c076497f0aec4cec65fb012f2646c78c8c97f0fa8b234d5ef638fa6d The package @antstackio/json-to-graphql was found to contain malicious code. Source: google-open-source-security a794210601d9e5b1ef92c7aeda3d35fc71941ed078d56db6265c5a20c3dfaf2a This package was compromised ...
Malicious code in @akunsansan0/karedok5 (npm)
Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @akunsansan0/biru35 (npm)
Source: amazon-inspector 50b688f91ab5fc8b7e22acf04af3867d5f53b468cdebdc0b93db0b5da1cdd748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @akunsansan0/batu6 (npm)
Source: amazon-inspector f9e6f663021d3074a519d53907d7c910f10569a3aeda699925c4b447fc3c7adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @0xlr/stripe-frontend (npm)
Source: amazon-inspector 3eda7bf8681a6253ffc4bc965888e45c5374e4ba8d4fe2e17efcd0f227d7ce5e On npm install, postinstall.js enumerates every entry in process.env sorted, bundles it with hostname, username, homedir, cwd, argv, and platform/arch, and POSTs the JSON payload over HTTPS to the hardcoded...
Malicious code in 0e (npm)
Source: amazon-inspector 71d3f3352259e4eb03352ae7be99bea6511ba3092aeb42a62c5ede4fb82dd614 a static rule a static pattern match critical flagged index.js for containing a Telegram bot token, chatid, sendMessage endpoint, a console Proxy wrapper, and JSON.stringify — the canonical shape of a...
Malicious code in 0xegg2024 (npm)
Source: amazon-inspector 86f32380998652e4d6d7b70da165cff6d669a4c6a6d9297da2a137071abf6317 Tea.yaml token farming campaign --- Credit: OpenSSF source...
PT-2026-70158
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.30.0 Description A heap-based out-of-bounds vulnerability exists in the kerberos DecryptMessage function within the winpr/libwinpr/sspi/Kerberos/kerberos.c file. The issue occurs because the 16-bit EC extra count...
Authentication Bypass
LightRAG is vulnerable to Authentication Bypass. The vulnerability is due to the use of a hardcoded default token secret and improper authentication validation order, which allows an unauthenticated attacker to obtain a guest JWT and access protected endpoints without a valid API key...
Insufficient Session Expiration
code.gitea.io/gitea is vulnerable to Insufficient Session Expiration. The vulnerability is due to improper invalidation of compromised Remember-Me session tokens, which allows an attacker to maintain unauthorized, persistent access to a user's account by reusing a stolen token even after the...
CVE-2026-66013 OpenRemote before 1.26.2 Authentication Bypass via Console Registration
OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without...
Sensitive Information Disclosure
n8n is vulnerable to Sensitive Information Disclosure. The vulnerability is due to placing the full Google Service Account PEM private key in the JWT header's kid field instead of a key identifier, which allows an attacker to recover the private key from logged or intercepted JWTs and impersonate...
EUVD-2026-48749
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
PT-2026-64669
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the SMB client. The smb2 check message function incorrectly applies a one-byte length exemption unconditionally, regardless of whether the command...
PT-2026-64763
Name of the Vulnerable Software and Affected Versions OpenRemote versions prior to 1.26.2 Description An authentication bypass exists in the console registration API. Unauthenticated attackers can update existing console assets by providing a known asset identifier. This allows the overwriting of...
PT-2026-64762
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A missing authorization issue exists in the 'POST /mcp' kernel endpoint, which is only protected by a general authentication check model.CheckAuth without enforcing admin roles or read-only...
CVE-2026-61892
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
