3380 matches found
Malicious code in pearpass-lib-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9729170ea50dd87efd7011a6f482d6ddae18cb1c53f5fd755c3ce10f9e23448 The package pearpass-lib-vault was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1238 Malicious code in pearpass-lib-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9729170ea50dd87efd7011a6f482d6ddae18cb1c53f5fd755c3ce10f9e23448 The package pearpass-lib-vault was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview pearpass-lib-vault-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
MAL-2026-1239 Malicious code in pearpass-lib-vault-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea7f0d3f5aeb68d46d1b2937e4f8ae385bbf4259cc518a7a27c72cc0068610f The package pearpass-lib-vault-core was found to contain malicious code. Source: ghsa-malware...
Malicious code in pearpass-lib-vault-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea7f0d3f5aeb68d46d1b2937e4f8ae385bbf4259cc518a7a27c72cc0068610f The package pearpass-lib-vault-core was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-9331
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
PT-2026-23064
Name of the Vulnerable Software and Affected Versions Vaultwarden versions 1.34.3 and prior Description Vaultwarden, a Bitwarden compatible server, is susceptible to a 2FA bypass when performing protected actions. An attacker who gains authenticated access to a user’s account can exploit this...
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
PT-2026-22827
Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2025.3.30 and earlier Description An issue exists in the connection entry component of the software where the 'Disable password saving in vaults' setting is not properly enforced. This allows an...
Devolutions Remote Desktop Manager 安全漏洞
Devolutions Remote Desktop Manager is an application system developed by the Canadian company Devolutions. It provides remote desktop management capabilities. The Devolutions Remote Desktop Manager versions prior to 2025.3.30 contained a security vulnerability. This vulnerability stemmed from...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: sops-fips, dagger, flux-notification-controller-fips, terraform-provider-pagerduty, crossplane-provider-aws-rds-fips, ratify, crossplane-provider-aws-ec2, gitlab-runner-fips, terraform-provider-databricks-fips, actions-runner-controller-fips, skaffold-fips, kots,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: sops-fips, dagger, flux-notification-controller-fips, terraform-provider-pagerduty, crossplane-provider-aws-rds-fips, ratify, crossplane-provider-aws-ec2, gitlab-runner-fips, terraform-provider-databricks-fips, actions-runner-controller-fips, skaffold-fips, kots,...
On the Security of Password Managers
Good article on password managers that secretly have a backdoor. New research shows that these claims aren’t true in all cases, particularly when account recovery is in place or password managers are set to share vaults or organize users into groups. The researchers reverse-engineered or closely...
Researchers Demonstrate 27 Attacks Against Major Password Managers
Researchers demonstrate multiple attacks against major password managers, showing how compromised servers and design flaws can expose encrypted vault data...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: step, fulcio-fips, sops-fips, elastic-agent, crossplane-provider-sql-fips, envoy-gateway-fips, crossplane-provider-sql, nri-mysql, sqlexporter-fips, temporal-server-fips, ratify, prometheus-mysqld-exporter, minio, elastic-agent-fips, rke2-runtime, keda-fips,...