Malicious code in t-invest-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c186ac158f68845fc995a94d15d44c2b65a521d2619d2850232e58f4a61419 Package is a dependency-confusion squat: package.json sets version 9999.99.99 the canonical max-version trick used to win resolution against any...

CVE-2026-28301 SolarWinds Observability Self-Hosted Open Redirect Vulnerability

A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website...

CVE-2026-28301

Technical specifics (affected products, versions, root cause, exploitability, mitigations) are not provided in the connected documents. Monitor for updates.

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in i18next-http-backend-1.4.5.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in i18next-http-backend-1.4.5.tgz Vulnerability Details CVEID:CVE-2026-41691 DESCRIPTION: Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a...

CVE-2026-8833

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another...

CVE-2016-20063

creationtimestamp| type| source ---|---|--- 2026-06-09 14:41:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnugklqaj62a...

CVE-2026-11764

creationtimestamp| type| source ---|---|--- 2026-06-09 13:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuddpdfxc2m...

CVE-2026-46319

creationtimestamp| type| source ---|---|--- 2026-06-09 13:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnucrro7ok2s 2026-07-01 02:34:17+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:23:25+00:00| seen...

CVE-2026-44744

creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...

CVE-2026-44746

creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...

CVE-2026-44743

creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...

CVE-2026-24315

creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...

CVE-2026-48864

creationtimestamp| type| source ---|---|--- 2026-06-09 12:00:52+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnu5kisxzq2a 2026-06-27 12:01:31+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mpbfy7f3bh2z...

CVE-2026-44083

creationtimestamp| type| source ---|---|--- 2026-06-09 11:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu4cm3xcd24 2026-06-17 12:00:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-18 03:38:08+00:00| seen|...

CVE-2026-41972

creationtimestamp| type| source ---|---|--- 2026-06-09 11:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu3znjo332e...

CVE-2026-47347

Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sanitization checks. This enables attackers to redirect users to external content and carry out phishing attacks. This...

CVE-2026-41983

creationtimestamp| type| source ---|---|--- 2026-06-09 11:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu2bgyoph2e...

CVE-2026-41973

creationtimestamp| type| source ---|---|--- 2026-06-09 10:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntzsnxf5s2u...

CVE-2026-47347 TYPO3 CMS - Open Redirect in Core Utilities

Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sanitization checks. This enables attackers to redirect users to external content and carry out phishing attacks. This...

CVE-2026-47347 TYPO3 CMS - Open Redirect in Core Utilities

Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sanitization checks. This enables attackers to redirect users to external content and carry out phishing attacks. This...