Malicious code in tyepescript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ba91f9b227b017ddbfa6a908a0a8f0263292a0af2c11aeef0ccd24b2894862 Package name 'tyepescript-core' is a typosquat of 'typescript'; the module itself exports an empty stub. scripts/postinstall.js XOR-decodes byte arra...

safer-dependencies v0.6.0

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

MAL-2026-14136 Malicious code in agora402-payment-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7a0b2d80c3876cf42a18bbe6b9f74b728270a70953007cdcfb46ee89453a3f The package advertises itself as a payment utility library, but its public API validateRecipient, routePayment, processPayment discards the...

Malicious code in agora402-payment-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7a0b2d80c3876cf42a18bbe6b9f74b728270a70953007cdcfb46ee89453a3f The package advertises itself as a payment utility library, but its public API validateRecipient, routePayment, processPayment discards the...

CVE-2026-15315

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...

wp2exp-2026

wp2exp2026 🔥 WordPress All-in-One Exploit Framework — Detector · Scanner · Enumerator · Exploit · Escalation wp2exp2026 is the rebranded, battle-tested successor of the wp2shell framework. It merges the original wp2shell checker/exploit chain, three public CVE-2026-63030 PoC kits Ch4120N,...

CVE-2026-15315 Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C200

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...

CVE-2026-15315 Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C200

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...

CVE-2026-15315

TP-Link Tapo C200 v5 has an authentication bypass in its login module: the device_confirm challenge parameter can be replayed to obtain administrative session tokens. An attacker on the local network gains full admin control, enabling privileged actions and DoS. A proof-of-concept was published o...

CVE-2026-70681

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: JRI and other Java utils. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70681

Oracle E-Business Suite versions 12.2.3 through 12.2.15 are affected by a HIGH-severity (CVSS 7.5) vulnerability in the JRI and other Java utils components. An unauthenticated network attacker can, with human interaction, compromise the Oracle Applications DBA product and achieve full takeover (c...

EUVD-2026-61636

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: JRI and other Java utils. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-72301

A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC3 control module. This vulnerability, a Time-of-check to Time-of-use TOCTOU issue, arises from incorrect size handling during memory copy operations in the bytesput and bytesget functions. A local attacker could exploit this to cau...

GHSA-7PWQ-Q9JF-539H kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox. Details A host embeds bound "Service" objects that guest scripts call across the wasm boundary through the transport dispatcher. The dispatcher passed the...

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox. Details A host embeds bound "Service" objects that guest scripts call across the wasm boundary through the transport dispatcher. The dispatcher passed the...

SUSE-SU-2026:23194-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...

CVE-2026-72297

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking module. This vulnerability occurs due to insufficient validation of traffic classes during Quality of Service QoS setup. A local user can exploit this by providing out-of-range traffic class values, which are then...

SUSE-SU-2026:23193-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...

CVE-2026-72274

A flaw was found in the Linux kernel's fbdev hecubafb module. A local attacker could exploit this by triggering an error path during the initialization of the hecubafb module. This could lead to a memory leak, potentially causing a denial of service due to resource exhaustion...

CVE-2026-72256

A flaw was found in the Linux kernel. The xtcluster module, specifically within the xtclustermt function, incorrectly processes template connection tracking conntrack objects. This state confusion occurs when a template conntrack is attached before it is fully initialized, leading to xtclusterhas...