Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

Summary A validation bug in internal/webhook/tenant/validation/forbiddenannotationsregex.go allows an invalid ForbiddenAnnotations.Regex value to bypass Tenant admission on update. The webhook compiles ForbiddenLabels.Regex for both labels and annotations, so a malformed annotations regex can be...

LMDeploy has an SSRF bypass

Summary The URL checking logic in lmdeploy has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current lmdeploy project uses issafeurl to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

Summary lmdeploy = latest contains a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model with a crafted quantizationconfig.quantdtype value. When a user loads the model with...

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

Summary LMDeploy's PyTorch DistServe/PD-disaggregation control plane used recvpyobj to deserialize messages received through a ZeroMQ PULL socket. PyZMQ implements recvpyobj using Python pickle deserialization, which can execute arbitrary code while reconstructing an object. The peer address used...

Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks

Summary The api.php?action=smwtask API module performs no authorization check. The equivalent maintenance interface in the web UI Special:SMWAdmin requires the smw-admin right, but the API module that backs several of the same operations enforces nothing. An unauthenticated visitor can therefore...

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Summary Special:FacetedSearch cstate hidden inputs enable reflected XSS residual of CVE-2025-10354 Details Affected versions and vulnerable location - Confirmed present on latest shipped release tag available in the local clone: SemanticMediaWiki/[email protected]. - Confirmed present on...

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

Reflected XSS via a forged cursor pagination token Failure mode Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an unsigned base64url-encoded JSON blob, so its contents are fully attacker-controlled. When the...

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

Query debug output XSS Failure mode Semantic MediaWiki's query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML. Several of its sinks apply no output-context encoding, so attacker-controlled query input is...

Semantic MediaWiki has an open redirect in Special:URIResolver

Failure mode Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without validating the resolved target. A crafted subpage can make that target point off-host: an interwiki prefix redirects to the foreign wiki for...

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

Failure mode The value parameter was reflected back into rendered output and error messaging paths without enough output-context encoding. Remediation - The form value is escaped before it is placed back into the input field. - Derived error messages are also escaped before being rendered into...

Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

Failure mode When headers=plain, table header text was emitted into via a raw HTML path. User-controlled mainlabel content could therefore become executable HTML. Remediation - TableResultPrinter now applies output-context escaping before passing plain headers to the table renderer. - The fix is...

Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes

Summary The SemanticMediaWiki extension inserts the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Details In ext.smw.js, the data-subtab attribute of all elements with the smw-subtab class is parsed as JSON and appended to the innerHTML of t...

Malware in openmct-heatmap

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in test89-auth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in test890-auth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in test899-auth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in test8999-auth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Duplicate Advisory: vm2 contains a sandbox escape vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pq68-rvw4-xp4r. This link is maintained to preserve external references. Original Description vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits...

Malicious code in @shared-web/assets (npm)

Source: amazon-inspector e8fd9342e97dc9f655a994fe1091125f717cbfa7b89aa6a2333662ad23ad6771 The package runs an install lifecycle script node index.js and also executes ./lib/core.js on require. That code collects os.userInfo.username, os.hostname, and process.cwd and issues a DNS resolve4 for a...

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

Malware in sinful

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

Summary The Opencast Paella player renders caption cue text into innerHTML without escaping. The captions canvas clears captionsContainer.innerHTML and then appends each active cue with captionsContainer.innerHTML += cue, so HTML inside a WebVTT or DFXP cue becomes live DOM and executes in the...

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

Caddy v2.11.3 — Three vulnerabilities in handler/placeholder layer Tested against: caddy:2.11.3 official Docker image, SHA verified at runtime Reproduction environment: Docker Desktop 4.73.1 / Engine 29.4.3 on Windows 10 host, isolated containers, no network egress required for any of the exploit...

Malicious code in @sanzoffc/baileys (npm)

Source: amazon-inspector 4393cd98419ed1fce683c0fde038bce830873769d85d69e64674df61f68502bc This package is a fork of the Baileys WhatsApp library that adds covert remote-controlled behavior driven by the installer's authenticated WhatsApp session. In lib/Socket/socket.js, socketConnect invoked fro...

Malicious code in tailwindcss-form (npm)

Source: amazon-inspector f5c6b39e2bde3263d10e2f20e707d06b981e746fda83ef7772233db33ae7a4f2 Package name mimics the legitimate tailwindcss-forms plugin repo field points at tailwindlabs/tailwindcss-forms but the main entry src/index.js is an obfuscator.io-packed bundle 303-entry rotated string arra...

Malicious code in blue-string-formatter-utils (npm)

Source: amazon-inspector aa3c9f5edcc636fc8d38e40a6bb225aed8f6b638be31f2abf8b6e747212c9565 The package advertises itself as 'Utility helpers for string formatting' but its shipped main file performs a single behavior: an XMLHttpRequest GET to the protocol-relative URL //xss.report/c/k3rne111 whose...

Malicious code in xzvbailsx (npm)

Source: amazon-inspector ac9176da252791a96b93c24e702c2245fb96d9655cdf9f31d61e9bc3e0c21528 package.json declares the dependency libsignal with source github:tenka-san/libsignal-node, an unpinned GitHub ref with no commit SHA, tag, or integrity hash. On npm install, npm fetches whatever HEAD of tha...

Malicious code in @lekzo/baileys (npm)

Source: amazon-inspector 2cd9141ef0d6d97338c5f976c8071a6f5c37010683b27d4463b2221d76b82304 package.json declares the libsignal dependency as github:canove/libsignal-node with no tag, branch, or commit SHA. On npm install, npm fetches whatever the default branch HEAD of that repository currently...

Malicious code in requests-auroras (PyPI)

Source: kam193 afa39517de816c01400eef99ef6ebce1357910c217c5e0ff55e4a252ea15a4c5 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-requests-triwes Reasons based on the campaign: - The packa...

Malicious code in xzvbailey (npm)

Source: amazon-inspector f961ec09baa139430fb2b04c3fef5350f16f659c8de585787a26f3c8535fca38 package.json declares the libsignal dependency as github:tenka-san/libsignal-node, a non-registry source pointing at a personal GitHub account with no tag or commit SHA. On npm install, npm fetches whatever...

Malicious code in xa424234657567 (npm)

Source: amazon-inspector 0174148efc99cd1130b3b9f2c57599aac0f80ead454fd7dc0f397386db891b0c The package ships console.js, which when loaded in a browser on any host matching duel.com fetches https://unpkg.com/[email protected]/1.js and https://unpkg.com/[email protected]/ui.js and executes both via...

Malicious code in zero-baileys (npm)

Source: amazon-inspector 58d472a4390be835fc8ffd5e62a7d3b2bb7270ad6ea651d9cd15bc7abd7735c8 package.json redirects the libsignal dependency to npm:@otaxayun/libsignal-node@latest. The @latest dist-tag is mutable and unpinned, so each npm install of zero-baileys resolves whatever tarball the @otaxay...

Malicious code in requests-triwes (PyPI)

Source: kam193 fa01be0759de95b7a1628930718f7b3bf372eff0c777aace419196e327e77078 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-requests-triwes Reasons based on the campaign: - The packa...

Malicious code in test89078-auth (npm)

Source: amazon-inspector c1ac938360c682e2489d11de9278697e7e2e85d73c612d2ab60ed28553bb5573 The package's preinstall script scripts.preinstall = 'node index.js' runs automatically on npm install and collects os.userInfo.username and os.hostname, then issues a dns.lookup against a subdomain of...

Malicious code in requests-asetwe (PyPI)

Source: kam193 7078a9b4fc2be32cbeb1f2c20ec67834c8e293bd410ceeb4842cacd8340d9835 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in @tink/tink-link-core (npm)

Source: amazon-inspector 826e81131e7b2a296324d469c10f1e44d5b33683703c8a2e0f101a8674c1cfcf The package impersonates the Tink open-banking SDK name @tink/tink-link-core, description 'Enterprise-grade client core for open banking', homepage github.com/tink-link/core but its actual behavior is host...

Malicious code in index-forum (PyPI)

Source: kam193 7561fd94425cdde34f5f9f3d20482a0da8680414d0f38e1e00fea419ce23cf66 The package hides code to exfiltrate specific files from the user's machine. The used file paths suggest it was intended to be used in a CTF-like environment. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in pyjstat-smooth (PyPI)

Source: kam193 82a12638b869aecb566588c24c0f59c3137f9b89a26ae67222370249a7176a75 The package hides code to exfiltrate specific files from the user's machine. The used file paths suggest it was intended to be used in a CTF-like environment. --- Category: MALICIOUS - The campaign has clearly malicio...

Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwq9-9ffj-mvrv This link is maintained to preserve external references. Original Description snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that...

Malware in kartykgithub-multiversion-a

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @railone/image-utils (npm)

Source: amazon-inspector ebec05d8415347cef93849315a26f4221e34efa278fffe1b89700af039246dc6 On import, index.js calls initialize which spawns a detached, stdio-suppressed, windowsHide node loader.js child init.js and records its PID. loader.js HTTPS-fetches JSON from...

Malicious code in tailwindcss-form-ui (npm)

Source: amazon-inspector c7a21e4623006a0c69e3dfeb80857eadd9102550c8a77c1d95e880245a5f0fa9 Package name and repository field impersonate the legitimate tailwindlabs/tailwindcss-forms plugin, but the shipped main entry src/index.js is a fully obfuscated obfuscator.io string-array module that has...

Malicious code in aiosendletter (PyPI)

Source: kam193 4e81e3b63bbe719f6d0bdd42930bb2f3235b8e41cbacf449743bb7dca67c9f08 Package hides code to exfiltrate files. Most releases target unclear files, but some reveal the goal to exfiltrate sensitive Telegram data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in tailwindcss-form-utils (npm)

Source: amazon-inspector 1eab685b70dc7394ba9eade13925f6da52267f61edcf8ba204bcf9ac3bd4c7bc The package publishes under the name tailwindcss-form-utils while pointing its repository field at https://github.com/tailwindlabs/tailwindcss-forms and mirroring that project's README verbatim, positioning...

Grav CMS vulnerable to remote code execution via .zip file upload

Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

Vulnerability Details Component: getgrav/grav core File: system/src/Grav/Common/Security.php Function: detectXss all six entries in the $patterns array use the PCRE u modifier, invoked from Grav\Common\Data\Validation::checkSafety the save-time XSS gate for any non-security.xsswhitelist account's...

Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Sinks: - system/src/Grav/Common/Data/Blueprint.php:455-458 calluserfuncarray$o, $params bare-function dynamic-data provider. - Twin: system/src/Grav/Framework/Flex/FlexDirectory.php:936-938...

Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Detector: system/src/Grav/Common/Security.php:290, the onevents regex, run via patternMatches :315-330. - The onevents pattern at HEAD: "'??:\s\x00-\x20"'/|"^""|'^''on\sa-z+\s=iu - Sole save-time guard for...