MAL-2026-1122 Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...

CVE-2026-27961

creationtimestamp| type| source ---|---|--- 2026-02-26 04:24:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqe2bychd2t 2026-02-26 05:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqg5pn7fb2e 2026-03-02 20:40:10+00:00| seen|...

CVE-2026-22553

creationtimestamp| type| source ---|---|--- 2026-02-24 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-01 2026-02-24 21:28:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn4dndg7f2s 2026-02-24 21:30:34+00:00| seen|...

GHSA-6C9J-X93C-RW6J

creationtimestamp| type| source ---|---|--- 2026-02-20 02:10:39+00:00| seen| https://gist.github.com/alon710/f4eee2d51384628d064473d1a040d3d4 2026-02-20 02:40:34+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfb3galb2g2s...

CVE-2026-1603

creationtimestamp| type| source ---|---|--- 2026-02-10 16:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejegksy3522 2026-02-10 16:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejehqfp3l2h 2026-02-11 04:00:00+00:00| seen|...

CVE-2026-25895

creationtimestamp| type| source ---|---|--- 2026-02-10 00:00:48+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mehntchb352m 2026-02-10 00:00:50+00:00| seen| https://infosec.exchange/users/offseq/statuses/116043392265377056 2026-04-24 22:00:05+00:00| published-proof-of-concept|...

CVE-2026-25580 Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources,...

CVE-2025-9343

creationtimestamp| type| source ---|---|--- 2025-12-21 04:05:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115755574768340057 2025-12-21 04:05:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mahtp2os7w2z 2025-12-22 11:36:42+00:00| seen|...

CVE-2025-14765

creationtimestamp| type| source ---|---|--- 2025-12-17 07:44:46+00:00| seen| https://gist.github.com/Darkcrai86/f13a3f85cd7d681eb476546e8cd0963a 2025-12-17 08:05:39+00:00| seen| https://gist.github.com/Darkcrai86/e98982419330973b32ad4fceddb40631 2025-12-17 08:32:21+00:00| seen|...

CVE-2025-14766

creationtimestamp| type| source ---|---|--- 2025-12-17 07:44:24+00:00| seen| https://gist.github.com/Darkcrai86/05dd0b6aed937b6cb3692d4ecdcb6e5a 2025-12-17 08:05:04+00:00| seen| https://gist.github.com/Darkcrai86/bb67ba707f1bbf538f455794a679320b 2025-12-17 08:32:21+00:00| seen|...

CVE-2025-66101

creationtimestamp| type| source ---|---|--- 2025-11-21 14:28:15+00:00| seen| https://gist.github.com/Darkcrai86/bac847baab810486fc9bbf0b4cd5ec21 2025-11-21 16:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m65oeg6lbk2q...

CVE-2025-45959

creationtimestamp| type| source ---|---|--- 2025-11-03 20:06:23+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qsz3xxtpi2 2025-11-03 21:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qyjfnvyz2q...

EUVD-2025-34672

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from malicious external parties in an unfiltered/unsalted way...

CVE-2025-9967

creationtimestamp| type| source ---|---|--- 2025-10-15 10:05:19+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m37ylnj6to2k 2025-10-15 11:30:34+00:00| seen| https://gist.github.com/Darkcrai86/8f0c868123b8419c376a1246fe256a84 2025-10-19 21:02:36+00:00| seen|...

CVE-2025-54406

creationtimestamp| type| source ---|---|--- 2025-10-07 14:00:28+00:00| seen| https://infosec.place/objects/14914574-a0a0-47ef-ae2b-97e35542f29f 2025-10-07 14:15:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333300163218722 2025-10-16 07:20:16+00:00| seen|...

CVE-2025-41713

creationtimestamp| type| source ---|---|--- 2025-09-15 08:03:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lyudnqaimac2 2025-09-15 10:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyukktjkgn2c...

TkEasyGUI Vulnerable to OS Command Injection

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2025-55037

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2025-55037

TkEasyGUI (Python) has an OS command injection vulnerability (CVE-2025-55037) affecting versions prior to v1.0.22. The issue arises from improper neutralization of special elements used in OS commands, enabling a remote unauthenticated attacker to execute arbitrary commands when messages are cons...

PT-2025-36111

Name of the Vulnerable Software and Affected Versions TkEasyGUI versions prior to 1.0.22 Description An OS Command Injection issue exists in TkEasyGUI. If exploited, an unauthenticated remote attacker may execute arbitrary OS commands if the settings are configured to construct messages from...