Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

CVE-2024-27198 Lab Description TeamCity provides an admin-...

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Summary A race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This advisory covers the race during mountpoint creation. The related race during the subsequent mount syscall is tracked in...

GHSA-VP62-88P7-QQF5 Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Summary A race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This advisory covers the race during mountpoint creation. The related race during the subsequent mount syscall is tracked in...

GHSA-FVH2-GM75-J4J7

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae...

CVE-2026-42559

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae 2026-09-09 05:00:07+00:00| seen| https://t.me/GithubRedTeam/101443 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101443...

CVE-2026-7302

creationtimestamp| type| source ---|---|--- 2026-05-18 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2l2fzt2g...

GHSA-C55G-RP4X-FX84

creationtimestamp| type| source ---|---|--- 2026-05-18 16:40:50+00:00| seen| https://gist.github.com/alon710/f7ea0e610f42bb6c81fff1ec9bb3b2bd...

CVE-2026-40796

creationtimestamp| type| source ---|---|--- 2026-05-18 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm5cizjp7a2c...

GHSA-79CF-XCQC-C78W

creationtimestamp| type| source ---|---|--- 2026-05-18 14:40:50+00:00| seen| https://gist.github.com/alon710/6c307c7259353f2c5a97793055cbda6e...

GHSA-97R8-RF7Q-WMJW

creationtimestamp| type| source ---|---|--- 2026-05-18 14:10:50+00:00| seen| https://gist.github.com/alon710/98fbc08fd28e864acb5a0c94e605d960...

Security update for cloud-init

This update for cloud-init fixes the following issues: Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 Update to version 25.1.1 bsc1239715, jscPED-8680, bsc1228414, bsc1237764 Make sure a directory exists, if not create it, before writing in that location bsc1236720 rsyslog...

SUSE-SU-2026:1980-1 Security update for cloud-init

This update for cloud-init fixes the following issues: - Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 - Update to version 25.1.1 bsc1239715, jscPED-8680, bsc1228414, bsc1237764 - Make sure a directory exists, if not create it, before writing in that location bsc1236720 -...

CVE-2026-42659

creationtimestamp| type| source ---|---|--- 2026-05-18 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4rqkm3rc2h...

CVE-2026-4273

creationtimestamp| type| source ---|---|--- 2026-05-18 08:59:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4j5attsm2h...

CVE-2026-6381

creationtimestamp| type| source ---|---|--- 2026-05-18 08:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4iucfrwj2e 2026-05-30 11:01:39+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vleu4kp2g...