Malicious code in verify-mycommand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f94ffb54a2471d0cc94ce1ea88f741e034221a374f17bfadbd609cb22f14f24 On npm install, postinstall.js executes whoami and id, collects host identity hostname, platform, cwd and CI metadata CI, GITHUBREPOSITORY, NODEENV...

CVE-2018-25378 Notebook Pro 2.0 Denial of Service via Notebook Name Field

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Noteboo...

SUSE-SU-2026:2049-1 Security update for helm

This update for helm fixes the following issues Security issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled...

MAL-2026-4347 Malicious code in @devcarron/clob (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2shell A Python 2.7 exploit for CVE-2...

CVE-2026-9435

creationtimestamp| type| source ---|---|--- 2026-05-25 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116634748548269306 2026-05-25 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmobiyztm622 2026-06-22 03:46:46+00:00| seen|...

SUSE-SU-2026:21831-1 Security update for libarchive

This update for libarchive fixes the following issues - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 bsc1259928. - CVE-2026-4426:...

SUSE-SU-2026:21757-1 Security update for libarchive

This update for libarchive fixes the following issues - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 bsc1259928. - CVE-2026-4426:...

CVE-2026-9434

creationtimestamp| type| source ---|---|--- 2026-05-25 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116634040801870107 2026-05-25 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmnxh5ydco2l 2026-06-22 03:46:39+00:00| seen|...

CVE-2026-9489

creationtimestamp| type| source ---|---|--- 2026-05-25 06:38:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116633835396055412 2026-05-25 09:26:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634495611199490...

CVE-2026-9407

creationtimestamp| type| source ---|---|--- 2026-05-25 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116632979036479792 2026-05-25 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmniedcwxa26 2026-06-22 03:17:08+00:00| seen|...

CVE-2026-45409

creationtimestamp| type| source ---|---|--- 2026-05-25 02:03:41+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mmnf6taznj27 2026-05-25 03:04:26+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mmnil4kweh2v 2026-05-26 00:02:50+00:00| seen|...

CVE-2026-9408

creationtimestamp| type| source ---|---|--- 2026-05-25 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116632625460794481 2026-05-25 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmnddk3og42y 2026-06-22 03:17:16+00:00| seen|...

[SECURITY] Fedora 42 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc42

A web-based UI for ActivityWatch, built with Vue.js...

CVE-2026-43503

creationtimestamp| type| source ---|---|--- 2026-05-25 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmn6erb63j2i 2026-05-25 00:01:48+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmn6evpgsz2i 2026-05-25 10:59:12+00:00| seen|...

PT-2026-43141

Name of the Vulnerable Software and Affected Versions WP Chill RSVP and Event Management versions prior to 2.7.17 Description A missing authorization issue exists due to incorrectly configured access control security levels, which allows for broken access control. Recommendations Update to a...

nano-9.0-2.1 on GA media (moderate)

nano-9.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10851-1 Rating: moderate Cross-References: CVE-2026-6842 CVE-2026-6843 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the nano-9.0-2...

Linux Distros Unpatched Vulnerability : CVE-2026-39828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially droppin...

Fedora 42 : python3.15 (2026-e7dc1a8950)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e7dc1a8950 advisory. A new prerelease of Python 3.15 with fixes to several CVEs. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 42 : evince (2026-49dc95b509)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-49dc95b509 advisory. Fix command injection CVE-2026-46529 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...