PT-2026-81810

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in the navigation component allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or lat...

PT-2026-81785

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass system access restrictions via UI Interaction by leveraging social engineering. Recommendations Upda...

PT-2026-81736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Extensions allows a remote attacker using social engineering to obtain sensitive information through a crafted Chrome extension. Recommendations Update Google...

PT-2026-81793

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-81764

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description UI misrepresentation in the input handling allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome on Mac to version...

PT-2026-81652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the password handling mechanism allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page...

PT-2026-81691

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Web Authentication Passkeys & Security Keys allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page...

CVE-2026-55477

creationtimestamp| type| source ---|---|--- 2026-08-24 22:35:03+00:00| published-proof-of-concept| https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg 2026-08-25 12:31:18+00:00| seen| https://gist.github.com/alon710/782a9d0e0a33092c615e2219299ab6e3...

GHSA-JM48-M3RR-9HGG 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...

Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

MAL-2026-14429 Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

[SECURITY] [DSA 6463-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6463-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 24, 2026 https://www.debian.org/security/faq -...

Malicious code in svelte-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f522350f40f35da150be92840f6a3cc1283b8e48bc5bfd95a114d7b2282dbbca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...

MAL-2026-14442 Malicious code in svelte-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f522350f40f35da150be92840f6a3cc1283b8e48bc5bfd95a114d7b2282dbbca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14441 Malicious code in svelte-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85c60ad2ca0f72057dc31af7e017b210304c5dc1927872717d331ecf391bf8f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85c60ad2ca0f72057dc31af7e017b210304c5dc1927872717d331ecf391bf8f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...

Malicious code in dims-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a85d660f6cc363a81624c7383318958bb46f2d6958fdad71e595692420d805d On any import 'dims-hydration-ui', index.mjs chmods 0755 and spawns a bundled Linux x8664 ELF at dist/internal/calc.dat as a detached child, describe...

Malicious code in dims-svelte-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bad5399590f49863bf42eff11c2a4c9f22c7db3dbc91d710faa0dfc732f02a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...