240486 matches found
MAL-2026-14076 Malicious code in bcs-mini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...
Malicious code in bcs-mini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM SECURITY ADVISORY First Issued: Fri Aug 14 20:25:19 CDT 2026 Updated: Fri Aug 21 10:35:27 CDT 2026 Update: Updated the summary to highlight the additional installation instructions. The most recent version of this document is available here:...
MAL-2026-14049 Malicious code in @mexc/shared-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook...
Malicious code in @mexc/shared-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook...
Malicious code in @ghost_debugger/nanocache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c027fa29f4577bd052bfda553a617994365ea5855216b877e900610542f4bcce On require/import, the package spawns a bundled 1.1 MB Windows executable at vendor/nanocache.exe as a detached background process with stdio ignored...
MAL-2026-14046 Malicious code in @ghost_debugger/nanocache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c027fa29f4577bd052bfda553a617994365ea5855216b877e900610542f4bcce On require/import, the package spawns a bundled 1.1 MB Windows executable at vendor/nanocache.exe as a detached background process with stdio ignored...
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...
GHSA-5FPJ-28RV-84R7 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73679 ImpressCMS Authenticated RCE via PHP Custom Tag eval()
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
EUVD-2026-58789
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73679
ImpressCMS has an authenticated remote code execution vulnerability in the custom tag module. The issue allows authenticated administrators to run arbitrary PHP by storing a payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via undoHtmlSpecialChars() and ...
CVE-2026-73679 ImpressCMS Authenticated RCE via PHP Custom Tag eval()
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
SUSE CVE-2026-68293
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...
SUSE CVE-2026-68294
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partitioned per network namespace: qrtrlocalnid is a single global node id...
SUSE CVE-2026-68371
In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...