MAL-2026-10447 Malicious code in remarkable-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464cab930bcf948abf49517f78a3ee1abb8b89c8f9c90f199bd3446c902d8e1e The package's preinstall script runs index.d.js, which reconstructs the identifier 'eval' from a character-code array 101,118,97,108 and base64-decod...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Detector Android app that detects the kernel v...

CVE-2026-57385

creationtimestamp| type| source ---|---|--- 2026-07-13 10:51:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjk26yaa2i...

CVE-2026-57380

creationtimestamp| type| source ---|---|--- 2026-07-13 10:51:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjj2oxcw2a 2026-07-13 18:59:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkesk5dve2i 2026-07-16 07:55:39+00:00| seen|...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the incoming webhook process. An attacker can impersonate another user and create posts or direct messages attributed to them by crafting specific webhook configurations and payloads...

CVE-2026-22093

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-13014

A vulnerability in Thales CERT "Suspicious" application = 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent...

EUVD-2026-43336

A vulnerability in Thales CERT "Suspicious" application = 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent...

EUVD-2026-43299

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this iss...

Malicious code in chain-guardian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c281292766d55cda3ff1b006154150aa05d567a4f8115534788ffbbc014f3e7 chain-guardian presents itself as a mocha gas reporter typosquatting eth-gas-reporter but its main entry index.js contains an always-true gate var op...

EUVD-2026-43325

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093

CVE-2026-22093 affects EVbee Service app (v1.4.101.00). The issue arises because the Android app performs TLS/HTTPS communication but does not validate the server certificate, enabling a man‑in‑the‑middle attacker on the network path to intercept and manipulate traffic. Additionally, the app is d...

CVE-2026-14453

creationtimestamp| type| source ---|---|--- 2026-07-13 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911848014654725 2026-07-13 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqjddarg6f2f 2026-07-13 09:08:06+00:00| seen|...

CVE-2026-15542

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this iss...

CVE-2026-10551

creationtimestamp| type| source ---|---|--- 2026-07-13 07:45:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj75ixawh2e 2026-07-14 03:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc65wqkm2y 2026-07-16 08:20:55+00:00| seen|...

CVE-2026-12275

creationtimestamp| type| source ---|---|--- 2026-07-13 07:43:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6z3gyqz22 2026-07-14 00:00:15+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqkvm5egav2z 2026-07-14 03:16:08+00:00| seen|...

MAL-2026-10286 Malicious code in backup2-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fe96add7d70ce5933988f1c78b934187e279d88618bd3f211de3d719177168 The tarball published as [email protected] is a Vite-built browser application branded 'Lucide' rather than a Node library. package.json declares mai...

PT-2026-57666

A vulnerability in Thales CERT "Suspicious" application = 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent...

CVE-2026-59801: Missing Authentication for Critical Function

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing authentication middleware in the Next.js API routes under...