CVE-2026-55997

creationtimestamp| type| source ---|---|--- 2026-08-05 08:44:18+00:00| seen| https://bsky.app/profile/suriq.io/post/3msd55h4riy2a...

GHSA-WVP2-4QQP-4H3R

creationtimestamp| type| source ---|---|--- 2026-08-05 08:32:27+00:00| seen| https://gist.github.com/alon710/489e9ca002ac3cb955fb509b828c43ec...

Malicious code in mnemonic-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc209736a2c44e541e224030a4c0bd7145bb77a17fa66504cd96beedc75ce6f4 index.js executes an IIFE at require-time that reads installer-owned secret files .env,.npmrc, /.aws/credentials, /.ssh/idrsa, ided25519, idecdsa,...

MAL-2026-12112 Malicious code in mnemonic-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc209736a2c44e541e224030a4c0bd7145bb77a17fa66504cd96beedc75ce6f4 index.js executes an IIFE at require-time that reads installer-owned secret files .env,.npmrc, /.aws/credentials, /.ssh/idrsa, ided25519, idecdsa,...

Malicious code in ethers-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4341b184e0a6a60cf305d78f3bb082ad161d36a7de50883afd1cf91e91b56c04 [email protected] impersonates the ethers.js ecosystem name 'ethers-lib', description 'Essential crypto utility library', wildcard dependency on...

MAL-2026-12111 Malicious code in ethers-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4341b184e0a6a60cf305d78f3bb082ad161d36a7de50883afd1cf91e91b56c04 [email protected] impersonates the ethers.js ecosystem name 'ethers-lib', description 'Essential crypto utility library', wildcard dependency on...

CVE-2020-10934

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...

CVE-2020-6465

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/890 2026-08-06 00:00:53+00:00| seen| https://t.me/timcorehacking/890...

CVE-2026-70591

creationtimestamp| type| source ---|---|--- 2026-08-05 04:31:14+00:00| seen| https://gist.github.com/alon710/f018a48cf6aafd68bd8bc1eabe897a46...

CVE-2026-18907

creationtimestamp| type| source ---|---|--- 2026-08-05 02:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iz6wskxiikwcm 2026-08-12 08:00:04+00:00| published-proof-of-concept| Telegram/vuQdXmMeT7ZjueM2JhgohUlB-sFrZ38VMxRjw40hYCSTaE 2026-08-13 00:00:44+00:00|...

CVE-2026-67857

creationtimestamp| type| source ---|---|--- 2026-08-05 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc7vgsgyj2g...

PT-2026-69012

These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed...

Photon OS 5.0: Coredns PHSA-2023-5.0-91-0045

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-68555

Name of the Vulnerable Software and Affected Versions Order Delivery Date for WooCommerce versions prior to 4.6.1 Description An issue exists in the Order Delivery Date for WooCommerce plugin for WordPress that allows authenticated attackers with Shop Manager-level access or higher to elevate the...

Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0835

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0835. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0170

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0170. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0195

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0195. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2026:11457-1 perl-Date-Manip-6.990.0-2.1 on GA media

These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0752

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0752. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the escape() function in the sql-string.js ORM library by Sequelize allows a attacker to execute arbitrary SQL code.

The vulnerability of the escape function in the sql-string.js ORM library by Sequelize is related to the lack of security measures taken to protect the SQL query structure when processing TODATE and TOTIMESTAMP parameters. Exploiting this vulnerability could allow an attacker to execute arbitrary...