CVE-2026-51599

creationtimestamp| type| source ---|---|--- 2026-07-10 18:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsk2unmk2h...

CVE-2026-51597

creationtimestamp| type| source ---|---|--- 2026-07-10 18:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsjz26m72r 2026-07-11 00:34:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg3vxy2e27...

GHSA-489G-7RXV-6C8Q

creationtimestamp| type| source ---|---|--- 2026-07-10 18:42:23+00:00| seen| https://gist.github.com/alon710/bb39e6fca7620239b1bd8e5a02d98b4e...

CVE-2026-55605

creationtimestamp| type| source ---|---|--- 2026-07-10 18:31:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcrtzifdi2d 2026-08-25 19:32:23+00:00| seen| https://gist.github.com/alon710/d086a00580da0e8964a59634ddcd20cd 2026-08-25 20:35:10+00:00| published-proof-of-concept|...

CVE-2026-53653

creationtimestamp| type| source ---|---|--- 2026-07-10 18:20:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqcra4ilol2c 2026-07-10 22:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdadyx4fk27 2026-07-10 23:35:17+00:00| seen|...

CVE-2026-57736

creationtimestamp| type| source ---|---|--- 2026-07-10 18:07:16+00:00| seen| https://bsky.app/profile/martechnotes.bsky.social/post/3mqcqi72gkh2b...

CVE-2026-58492

creationtimestamp| type| source ---|---|--- 2026-07-10 17:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcpfumldx24 2026-07-10 23:13:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbkwnpvh2d 2026-07-10 23:13:07+00:00| seen|...

CVE-2026-58493

grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::call builds PDO DSN strings by directly concatenating user-configurable YAML values from fields such as host, dbname, charset, server, database, directory, and filename without sanitization or validation, allowing...

EUVD-2026-42977

ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original...

CVE-2026-33382

creationtimestamp| type| source ---|---|--- 2026-07-10 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrjabny2r 2026-07-10 22:29:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd75hwwav2i 2026-07-11 00:20:09+00:00| seen|...

CVE-2026-60089

creationtimestamp| type| source ---|---|--- 2026-07-10 16:52:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmcjbu2v27 2026-07-10 20:24:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy4szvbc27...

Malicious code in notifier-funcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da033e00206575ad1328031d625b6c6281332e9ecf5514feae6e99cb285d021 On require, index.js spawns a detached Node child spawn'node', ..., detached:true, stdio:'inherit'; child.unref that runs lib/vcall.js. That script...

CVE-2026-56765

creationtimestamp| type| source ---|---|--- 2026-07-10 16:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcltiwe322h 2026-07-12 07:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7kzfna2w...

CVE-2026-56261

creationtimestamp| type| source ---|---|--- 2026-07-10 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclthdrpr2f 2026-07-12 07:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7rjqh62r 2026-07-14 03:07:06+00:00| seen|...

CVE-2026-56814

creationtimestamp| type| source ---|---|--- 2026-07-10 16:43:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqclt7fdnp27...

CVE-2026-61437

creationtimestamp| type| source ---|---|--- 2026-07-10 16:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclqmets62x 2026-07-10 20:16:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxopggxy27 2026-07-10 23:31:15+00:00| seen|...

CVE-2026-61456

creationtimestamp| type| source ---|---|--- 2026-07-10 16:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclhnwrcu2e 2026-07-10 20:20:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxwefthh2a 2026-07-10 22:19:19+00:00| seen|...

CVE-2026-61441

creationtimestamp| type| source ---|---|--- 2026-07-10 16:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcl6piort2i 2026-07-10 22:21:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6omq2ei26 2026-07-10 23:26:14+00:00| seen|...

CVE-2026-61432

creationtimestamp| type| source ---|---|--- 2026-07-10 16:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckwzwntr2k 2026-07-10 20:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxneg5ju2i 2026-07-10 23:29:45+00:00| seen|...

CVE-2026-58493

CVE-2026-58493 affects grav-plugin-database (Grav CMS) prior to 1.2.0. The plugin builds PDO DSN strings by concatenating user-configurable YAML values (host, dbname, charset, server, database, directory, filename) without sanitization, enabling an administrator with plugin config access to injec...