The doghack-afterglow npm package contains malicious code that compromises any computer on which it is installed or running. This compromise can lead to full control by an outside entity, risking exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised computer is strongly advised.
The npm package @saidddddddddd/ggsgg contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
SkyW4lker is a phishing kit that targets Microsoft 365 users, primarily in the United States and Europe. It abuses Microsoft's device-code authentication flow to gain access to corporate accounts without stealing passwords or bypassing MFA. The kit uses password-protected email attachments containing links that lead victims through CAPTCHA challenges to Microsoft's legitimate authentication system. Activity increased notably between June and October 2026, with the US accounting for nearly half of the observed submissions. The kit shares infrastructure and code with the Gabagool phishing kit, indicating a common threat actor.
The nminer package version 3.0.0 on npm contains malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package does not guarantee elimination of all malicious software introduced by its installation.
This security update for the nvidia-open-driver-G07-signed package addresses multiple issues including build fixes and the re-disabling of CXL support. It also includes security fixes for a large set of vulnerabilities identified by numerous CVE identifiers, originally released in NVIDIA security releases 595.91.07 and 615.71.09. The update is provided by the SUSE Product Security Team and targets the SUSE product. No specific affected versions are stated in the available data.
A heap buffer overwrite vulnerability exists in the PICT decoder of GraphicsMagick on 32-bit systems. This issue is addressed in a security update by the SUSE Product Security Team.
This security update for Ghostscript addresses two vulnerabilities: a sandbox bypass via Type 5 shading out-of-bounds write and procedure-stream use-after-free (CVE-2026-101258), and a stack-based buffer overflow in the pdfwrite device triggered by crafted font data (CVE-2026-103226). Both issues could lead to potential exploitation if unpatched.
This security update for python-PyJWT addresses two vulnerabilities: CVE-2026-102268, which allows an attacker who knows the public key to forge authenticated HMAC tokens, and CVE-2026-102270, which enables an attacker to cause intensive CPU consumption. Both issues are fixed by the update.
Multiple security vulnerabilities affecting the Linux kernel have been addressed in a security update for Red Hat Enterprise Linux 10. The update fixes several issues including race conditions, use-after-free bugs, unauthorized data modification, and improper handling of TLS handshake callbacks. These vulnerabilities impact core kernel components such as writeback, sunrpc, resctrl, sctp, openvswitch, PCI/sysfs, and xfs. The update requires a system reboot to take effect.
Tesseract OCR engine versions prior to 4.1.1-11.el9_8 contain a stack buffer overflow vulnerability via crafted .traineddata files (CVE-2026-88047). This flaw can lead to memory corruption and potential security risks. Multiple related heap out-of-bounds write vulnerabilities affecting Tesseract are also addressed in the same update. Red Hat has released a security update fixing these issues in version 4.1.1-11.el9_8.
A security update for webkit2gtk3 addresses multiple vulnerabilities in the Skia graphics library component used by chromium-browser within WebKitGTK. These include use-after-free, cross-origin data disclosure, information disclosure, integer overflow, out-of-bounds read, memory corruption, and improper input validation issues. The vulnerabilities affect versions of webkit2gtk3 prior to 2.54.2-0.el9_8.2. A fixed version 2.54.2-0.el9_8.2 is available from Red Hat.
Multiple security vulnerabilities in the Linux kernel have been addressed in an update for Red Hat Enterprise Linux 8. These include fixes for use-after-free and out-of-bounds errors in SCTP, net/smc, RDMA/rxe, and openvswitch components. The update also includes bug fixes and enhancements unrelated to security. The kernel update must be applied and the system rebooted to activate the fixes.
A security vulnerability (CVE-2026-93520) in xorg-x11-server-Xwayland allows arbitrary code execution due to an out-of-bounds write in XKB keycode handling. This issue affects versions prior to 21.1.3-20.el8_10.5. Red Hat has released an update to address this vulnerability with a security impact rated as Moderate.
This entry references multiple vulnerabilities affecting MongoDB components including EF Core Provider, Atlas SQL, C driver, Rust driver, Database Tools, and Node.js driver. MongoDB is an open-source document database. No specific details on the vulnerabilities, affected versions, or impacts are provided.
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify(), async_notify(), and wall(). When a monitored device reports an ALARM state and an operator has configured NOTIFYCMD with EXEC in NOTIFYFLAG ALARM, shell metacharacters in the alarm text are evaluated on POSIX or Windows and can execute arbitrary operating-system commands as the upsmon account, which is commonly root. An attacker can control the value through a malicious or compromised upsd, a man-in-the-middle on a plaintext upsd to upsmon connection, or a compromised UPS device whose driver supplies the alarm upstream of upsd; TLS between upsd and upsmon does not mitigate the compromised-device path. This vulnerability is fixed in 2.8.6.
This security update for the GitHub CLI tool 'gh' addresses multiple issues related to authentication token handling, including token expiry diagnosis, refresh token behavior, and credential management. The update spans several versions culminating in 2.103.3, fixing bugs and improving token refresh and login telemetry. No specific vulnerability details or exploitation methods are provided.
This security update for rqlite addresses multiple issues including a security vulnerability related to authentication files that could allow a user with no explicit permissions to gain elevated permissions. The update also improves error handling for various API endpoints, fixes authorization and backup stream handling issues, and includes multiple implementation changes and bug fixes. Correctly configured users are not affected by the elevated permissions issue. The update spans versions from 10.0.2 through 10.6.6 with various incremental fixes and improvements.
A security update for the SUSE product 'hauler' addresses a vulnerability identified as CVE-2026-116591. The issue involves a crafted approximately 27 KB two-block zstd frame that causes the DecodeAll function and the streaming decoder in the klauspost/compress/zstd library to panic. This update fixes the problem by updating vendor.tar. No specific affected versions are provided.
This security update for go-containerregistry addresses multiple issues including a panic vulnerability in the zstd decoder (CVE-2026-116591) caused by crafted input, and fixes to SSRF protections rejecting non-canonical IP literals. Additional fixes and improvements cover authentication handling, build processes, and various bug fixes. The update includes multiple version increments with security and functionality enhancements.
This security update for perl-MIME-tools addresses multiple security issues in the MIME parsing functionality. The update, version 5.522.0, fixes ten CVEs related to ambiguous parameter parsing, boundary handling, memory and CPU exhaustion via specially crafted messages, symbolic link misuse, and other parsing ambiguities. The fixes include stricter checks on MIME parameters, limits on parsing depth and parts, and prevention of resource exhaustion attacks. These vulnerabilities could allow attackers to cause denial of service or bypass security checks by exploiting MIME message parsing flaws.
