2817 matches found
CVE-2025-13029
creationtimestamp| type| source ---|---|--- 2025-12-31 06:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3mbbaupnewh24 2026-01-02 15:22:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbh75gxx7u2p 2026-01-02 18:50:33+00:00| seen|...
CVE-2022-50804
creationtimestamp| type| source ---|---|--- 2025-12-31 01:06:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbaoeukq6y2c 2025-12-31 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrahlzir23...
CVE-2022-50798
creationtimestamp| type| source ---|---|--- 2025-12-31 00:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbamyqo3s52c...
CVE-2025-14896
creationtimestamp| type| source ---|---|--- 2025-12-18 20:02:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabxsi53xe2c...
CVE-2025-68294
creationtimestamp| type| source ---|---|--- 2025-12-16 17:31:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115730434869931386 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
DecoCMS 访问控制错误漏洞
DecoCMS is a content management system from deco CMS open source. An access control error vulnerability exists in DecoCMS 1.0.0-alpha.31 and earlier versions, which stems from incorrect manipulation of the parameter domain in the file packages/sdk/src/mcp/teams/api.ts, which could lead to imprope...
PT-2025-51162
A flaw has been found in DecoCMS Mesh up to 1.0.0-alpha.31. Affected by this vulnerability is the function createTool of the file packages/sdk/src/mcp/teams/api.ts of the component Workspace Domain Handler. This manipulation of the argument domain causes improper access controls. The attack can b...
CVE-2025-34499
creationtimestamp| type| source ---|---|--- 2025-12-12 00:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qryxtljv2m...
CVE-2025-67693
creationtimestamp| type| source ---|---|--- 2025-12-11 07:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ozzapf6h2q...
CVE-2025-64324 affecting package kubevirt for versions less than 0.59.0-31
CVE-2025-64324 affecting package kubevirt for versions less than 0.59.0-31. A patched version of the package is available...
CVE-2025-59703
creationtimestamp| type| source ---|---|--- 2025-12-02 18:42:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zlup577q2s...
CVE-2025-12969
creationtimestamp| type| source ---|---|--- 2025-11-25 12:05:31+00:00| seen| https://gist.github.com/Darkcrai86/9c78936ffd5178a4049061473f0a3a90 2026-07-26 02:00:28+00:00| seen| https://t.me/EchelonEyes/4184 2026-07-27 00:00:09+00:00| seen| https://t.me/EchelonEyes/4184 2026-08-19 21:00:07+00:00|...
EUVD-2025-137052
Malicious code in riya-31 npm...
EUVD-2025-141300
Malicious code in ira-31 npm...
MAL-2025-178312 Malicious code in riya-31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riya-31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hokage-31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209f8a069b183c8d06b76de47c523e48634ace986b86f260cf2317f977601f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lia-31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c822f380ed60615955c7e8f9dc061256207d584089024d0a2a3492e60afd6995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...