CVE-2026-42215

creationtimestamp| type| source ---|---|--- 2026-05-07 19:53:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbyl7e7ip2z 2026-05-07 23:03:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcd6jpjjh2h 2026-05-11 20:37:07+00:00| seen|...

CVE-2026-33539 Parse Server: SQL injection via aggregate and distinct field names in PostgreSQL adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.59 and 9.6.0-alpha.53, an attacker with master key access can execute arbitrary SQL statements on the PostgreSQL database by injecting SQL metacharacters into field name...

CVE-2026-33131

creationtimestamp| type| source ---|---|--- 2026-03-17 11:50:55+00:00| published-proof-of-concept| https://github.com/h3js/h3/security/advisories/GHSA-3vj8-jmxq-cgj5 2026-03-20 13:53:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhio42zzri2u 2026-03-20 21:40:09+00:00| seen|...

CVE-2026-33128

creationtimestamp| type| source ---|---|--- 2026-03-17 11:38:35+00:00| published-proof-of-concept| https://github.com/h3js/h3/security/advisories/GHSA-22cc-p3c6-wpvm 2026-03-20 12:53:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhikpks5qa2o 2026-03-20 19:42:22+00:00| seen|...

CVE-2026-3402

creationtimestamp| type| source ---|---|--- 2026-03-02 03:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2dvmko2x2u...

CVE-2026-24351

creationtimestamp| type| source ---|---|--- 2026-02-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/02/CVE-2026-24350/ 2026-02-27 13:53:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftubrawva2d...

CVE-2025-67187

creationtimestamp| type| source ---|---|--- 2026-02-04 19:05:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2kzfdibd2a...

CVE-2025-71164

creationtimestamp| type| source ---|---|--- 2026-01-14 19:53:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcftvq3ij62e...

CVE-2026-22607

creationtimestamp| type| source ---|---|--- 2026-01-09 17:57:42+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-p523-jq9w-64x9 2026-01-10 03:02:28+00:00| seen| Telegram/S2KXutw1drBgRsxEuEIjByNvXPd-WruEjV0wL9OdN7BsNk 2026-01-10 03:49:53+00:00|...

CVE-2026-21684

creationtimestamp| type| source ---|---|--- 2026-01-07 23:09:50+00:00| seen| Telegram/Hv7piurWFmTJB7c7iHri9T0M-meMIfk5qPkk7ikOJpSuKtA 2026-01-07 23:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbundduicw2e...

CVE-1999-0275

Denial of service in Windows NT DNS servers by flooding port 53 with too many characters...

CVE-2025-67729

creationtimestamp| type| source ---|---|--- 2025-12-26 03:14:40+00:00| published-proof-of-concept| https://github.com/InternLM/lmdeploy/security/advisories/GHSA-9pf3-7rrr-x5jh 2025-12-26 22:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawdw7x6fm2y...

CVE-2025-65363

creationtimestamp| type| source ---|---|--- 2025-12-08 16:53:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684986931258539 2025-12-08 19:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iqav3o5q2u...

GHSA-WHM3-VV55-GF27

creationtimestamp| type| source ---|---|--- 2025-12-05 16:53:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115667997784638676...

Mozilla Firefox < 53.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 53.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2017-14 advisory. - A use-after-free can occur during Buffer11 API calls within the ANGLE graphics library, used for WebGL content. This...

Mozilla Firefox < 53.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 53.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-10 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 ...

EUVD-2025-143501

Malicious code in alvino-53 npm...

Malicious code in alvino-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b190aea7635738dca0a0ce3da5bf6ca53ab997d9790dc351d6c49f1d92ba5311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c055326355125f056b99cae16d1d32b14f509707f2102b5d63cdea7b0a65f2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157535 Malicious code in kentung-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b072dfc5c62bd12611390e8b503ba2c8717fec798c1f7540a021b5c028ba16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...