CVE-2026-23876

CVE-2026-23876 – ImageMagick heap buffer overflow (ReadXBMImage) Affected software: ImageMagick versions prior to 7.1.2-13 and 6.9.13-38.Root cause: heap buffer overflow in the XBM image decoder during processing of crafted images.Impact: attacker can write data past the allocated heap buffer, po...

CVE-2026-23876 Heap buffer overflow with attacker-controlled data in XBM parser

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

CVE-2026-23876

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

MiracleLinux 9 : openssh-8.7p1-38.el9_4.4 (AXSA:2024-8554:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8554:06 advisory. openssh: Possible remote code execution due to a race condition in signal handling affecting MIRACLE LINUX 9 CVE-2024-6409 Tenable has extracted the precedin...

MiracleLinux 4 : firefox-38.3.0-2.0.1.AXS4 (AXSA:2015-500:09)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-500:09 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

CVE-2021-47807

creationtimestamp| type| source ---|---|--- 2026-01-16 01:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcixmb44ee2x...

MiracleLinux 3 : OpenIPMI-2.0.16-16.0.1.AXS3 (AXSA:2013-38:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-38:01 advisory. The Open IPMI project aims to develop an open code base to allow access to platform information using Intelligent Platform Management Interface IPMI. This...

MiracleLinux 3 : php-5.1.6-23.2AXS3 (AXSA:2009-38:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-38:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers...

CVE-2019-25278

creationtimestamp| type| source ---|---|--- 2026-01-08 02:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuv5adh6p2o 2026-01-08 21:03:05+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwwuuf23...

CVE-2025-69417

creationtimestamp| type| source ---|---|--- 2026-01-02 18:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbhk2oxsgd2q...

CVE-2025-15202

creationtimestamp| type| source ---|---|--- 2025-12-29 23:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5xbmmjz52y...

CVE-2025-68738

creationtimestamp| type| source ---|---|--- 2025-12-24 14:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maqj4jgmxx2e 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-13407

creationtimestamp| type| source ---|---|--- 2025-12-24 08:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mapsnoxrt42x 2025-12-24 11:45:48+00:00| seen| https://gist.github.com/Darkcrai86/292b8d051a421c83854f25a16cd87e1d 2026-06-26 13:15:07+00:00| seen|...

CVE-2025-14856

creationtimestamp| type| source ---|---|--- 2025-12-18 05:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maagldpmzw22...

CVE-2025-60672

creationtimestamp| type| source ---|---|--- 2025-11-13 19:38:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115544079480228162 2025-11-13 21:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5k2pu3cox26 2025-11-19 13:12:16+00:00| seen|...

EUVD-2025-141503

Malicious code in hokage-38 npm...

EUVD-2025-141293

Malicious code in ira-38 npm...

EUVD-2025-140404

Malicious code in lia-38 npm...

EUVD-2025-137038

Malicious code in riya-38 npm...

MAL-2025-174775 Malicious code in hokage-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d4da4efc056c9d764bad00c35d3ae93acc0b268722c1a8ef9f665e7231eea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...