CVE-2026-12605

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm65koi2i 2026-08-11 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrn426pqz2u...

CVE-2026-5134

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm4uoar2l...

GHSA-8V25-V8P6-QF7V

creationtimestamp| type| source ---|---|--- 2026-08-06 14:32:29+00:00| seen| https://gist.github.com/alon710/24bef11b86322cc9770e86fa941513f4...

MAL-2026-13427 Malicious code in @leejungkiin/awkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa6db17591fc0a27924ca615763ffd2a3eb92d0f517de9719ce74ef47ac4add The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync'curl -fsSL...

CVE-2026-5116

creationtimestamp| type| source ---|---|--- 2026-08-06 14:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msga3ycwr326...

CVE-2026-18973

creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msg7cjkbv426 2026-08-06 14:01:32+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048924886717524...

CVE-2026-67434

creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:28+00:00| seen| https://gist.github.com/FR-Flo/a87a156132d4ce3d4d952e21a796220a 2026-08-06 14:59:38+00:00| seen| https://gist.github.com/FR-Flo/ce0e6938e2c8aa7a093b16e80373dccf 2026-08-07 04:31:19+00:00| seen|...

Malicious code in @ccfly/setup-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33138ee17148f975a7c0b34f5d6ee1a4ad082395b87872dc91de0778130b91c8 The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/creack/pty PTY spawning and...

GHSA-8MXV-9XHP-86H4

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:14+00:00| seen| https://gist.github.com/alon710/719fff48bd5faded3e0e79faaf3782f6...

CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-0516

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4ibyz3425 2026-09-06 20:13:03+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3muuskhrap22n...

CVE-2026-61545

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...

CVE-2026-61527

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...

CVE-2026-16100

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

CVE-2026-16102

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-12 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msuclvghtf22 2026-08-12 04:37:08+00:00| seen|...

CVE-2026-16071

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

CVE-2026-19039

The vulnerability CVE-2026-19039 affects Kino-Kafkaesque ssh-mcp-server (SSH Command Handler) specifically the function ssh_exec in src/index.ts. The issue arises from manipulation of the host/username argument, enabling command injection. Exploitation is described as a local attack, with the thr...

CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...