122646 matches found
CVE-2026-64640
creationtimestamp| type| source ---|---|--- 2026-08-06 19:53:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fkstcuwaltx53 2026-08-08 23:32:42+00:00| seen| Telegram/C3q2vOTdkXA6iF-hzMGQrZVnDCfVSala-72eNVn5iLBkyI 2026-08-09 00:05:53+00:00| published-proof-of-concept|...
MAL-2026-13456 Malicious code in santana-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01fc218f60217e160355fc41c6006c25da2197ea1fec2b3402df38e125e4252 santana-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js line 425 and again at line 436 reconstructs a destination URL...
GHSA-8RXV-JG7P-WVG3
creationtimestamp| type| source ---|---|--- 2026-08-06 19:32:23+00:00| seen| https://gist.github.com/alon710/73aecb4bf7a9c9303fe6451f784d95ea...
MAL-2026-13446 Malicious code in express-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34482e23635422fb5ca5632e68708453f1c99317a31e5e8346c75c4d3466560f express-chai presents itself as an Express logger middleware impersonating pino, but its exported middleware factory invokes lib/caller.js which...
CVE-2026-9205
creationtimestamp| type| source ---|---|--- 2026-08-06 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgphlo4ks2m 2026-10-05 22:31:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jxw3-mjmx-3pqm...
EUVD-2026-54217
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANTADMIN of that tenant, including the databaseUrl field. This field contains...
CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-58158
creationtimestamp| type| source ---|---|--- 2026-08-06 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgjpi53yw2r...
CVE-2026-3430
creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjehd5472n...
CVE-2026-71446 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71446
The CVE-2026-71446 vulnerability affects the AIL Framework, specifically the crawler domain view where crawled URLs are embedded directly into a JavaScript onclick handler for the stored screenshot feature. The root cause is inadequate encoding of the stored URL, allowing an attacker to inject Ja...
Malicious code in @lyxa.ai/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a32d4762c92b12ad7fd0567dfa0f07470a01884303acdc7a3585bfb4ad7fff2 The exported bootstrapCore unconditionally initializes the event bus with a hardcoded amqps:// URL containing embedded credentials for the author's...
CVE-2026-70637
creationtimestamp| type| source ---|---|--- 2026-08-06 16:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dfebd4n6mb6sx...
CVE-2026-65573
creationtimestamp| type| source ---|---|--- 2026-08-06 16:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggn3kn6l2m...
CVE-2026-65553
creationtimestamp| type| source ---|---|--- 2026-08-06 16:08:30+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggfx7l7n2p 2026-08-10 08:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspnvqxdlh2r 2026-08-11 04:16:08+00:00| seen|...
CVE-2026-65546
creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcd7m3t2o 2026-08-12 00:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msttzaxsnp2a...
CVE-2026-70646
creationtimestamp| type| source ---|---|--- 2026-08-06 16:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfza4pbj2n...
CVE-2026-65520
creationtimestamp| type| source ---|---|--- 2026-08-06 15:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfqjds452f 2026-08-06 23:14:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msh67njzkv26 2026-08-06 23:14:06+00:00| seen|...