EUVD-2026-42836

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName.newInstance without any validation or allowlisting. This issue affects Apache IoTDB:...

EUVD-2026-40150

A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated...

EUVD-2026-31689

Hackney has SSRF allowlist bypass in hackneyurl:normalize/2 via percent-encoded host...

EUVD-2026-36388

Vulnerability Title...

EUVD-2026-30900

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

EUVD-2026-22937

CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...

EUVD-2026-9798

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-1986

Malicious code in @workleap-ai/shared npm...

EUVD-2025-202593

Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the downloadmedia method before using them in file path construction. When downloading media, if the user does not specify a custom filename...

EUVD-2025-201044

Malicious code in elf-stats-silvered-stocking-120 npm...

EUVD-2025-198643

Malicious code in @postman/tunnel-agent npm...

EUVD-2025-177578

Malicious code in node-config-commitlint-panspermia-superposition npm...

EUVD-2025-133192

Malicious code in teate-thy-sonic-fesdit npm...

EUVD-2025-140214

Malicious code in mibasdah-natu-munfsa npm...

EUVD-2025-140692

Malicious code in ksai-kais-ahakaolaji npm...

EUVD-2025-145333

Malicious code in latifakram npm...

EUVD-2025-114015

Malicious code in epimetheus-ganymede-native-superagent npm...

EUVD-2025-100674

Malicious code in cici-oblok33-riris npm...

EUVD-2025-101071

Malicious code in bella-mendut1-riris npm...

EUVD-2025-97578

Malicious code in joni-miebogor8-riris npm...