Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VulnScope

VulnScope POC Proof of Concept Vulnerability Verificati...

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, cloud-provider-gcp-cloud-controller-manager-fips, blob-csi, prometheus-node-exporter-fips, docker-machine-driver-linode, crossplane-provider-aws-sns, kapp,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, cloud-provider-gcp-cloud-controller-manager-fips, blob-csi, prometheus-node-exporter-fips, docker-machine-driver-linode, crossplane-provider-aws-sns, kapp,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, node-feature-discovery, harbor-registry-fips, crossplane-provider-aws-firehose, mcp-grafana, nats, terraform-provider-random-fips, addon-resizer, rancher-fleet-fips, aws-efs-csi-driver, supercronic, blob-csi, prometheus-node-exporter-fips,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: nri-f5, cilium-cli, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, hivemind, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-elasticache, hydra, aws-signer-notation-plugin,...

GO-2026-4433 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, cilium-cli, gobump, kubernetes-dashboard-metrics-scraper, cis-operator, flux, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, polaris, hivemind, vertical-pod-autoscaler, custom-pod-autoscaler-operator,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: nri-f5, cilium-cli, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, hivemind, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-elasticache, hydra, aws-signer-notation-plugin,...

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. "Both missions are administered from a single control panel, XG-Web , a browser-centric...

ReconTitan

A security-hardened platform for external reconnaissance, OSIN...

bind9.16 security update

An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792 Tenda G0 httpd web management interface module setPortMapping buffer overflow

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58585

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792 Tenda G0 httpd web management interface module setPortMapping buffer overflow

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792

CVE-2026-19792 affects Tenda G0 devices; the httpd web management interface’s setPortMapping function in /goform/module is vulnerable to a buffer overflow via manipulated portMappingServer/porMappingtInternal/portMappingExternal. This enables remote exploitation with high impact (confidentiality,...