GHSA-H5G4-PPWX-48Q2

creationtimestamp| type| source ---|---|--- 2025-04-22 18:03:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12926...

GHSA-8C28-5MP7-V24H

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...

GHSA-H4Q8-96P6-JCGR

creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12060...

Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-58H4-9M7M-J9M4

creationtimestamp| type| source ---|---|--- 2025-04-08 13:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10903...

CVE-2025-28269

creationtimestamp| type| source ---|---|--- 2025-04-06 18:13:23+00:00| published-proof-of-concept| https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx...

CVE-2025-71319

creationtimestamp| type| source ---|---|--- 2025-04-02 15:04:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m5qc-5hw7-8vg7 2026-07-01 15:14:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsnpvgpw2o 2026-07-02 23:55:28+00:00| seen|...

GHSA-W34W-FVP3-68XM

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9944...

GHSA-6PHG-4WMQ-H5H3

creationtimestamp| type| source ---|---|--- 2025-03-26 16:25:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8883...

GHSA-RPF7-G4XH-84V9

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8767...

GHSA-QR4Q-6H3M-H3G7

creationtimestamp| type| source ---|---|--- 2025-03-11 13:39:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7130...

GHSA-PWHH-Q4H6-W599

creationtimestamp| type| source ---|---|--- 2025-02-27 15:30:14+00:00| published-proof-of-concept| Telegram/18aGabcqT47rhbAtmBCfjbslvF7WShvEcg6GVkQNwRNaIHA...

GHSA-VFXC-QG3V-J2R5

creationtimestamp| type| source ---|---|--- 2025-02-25 18:22:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5342...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2022-21671

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

CVE-2020-15134

Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes. Faye uses em-http-request and faye-websocket in the Ruby version of its client. Those libraries both use the EM::Connectionstarttls method in EventMachine to implement the TLS handshake whenever a wss: URL i...

GHSA-8C3X-HQ82-GJCM

creationtimestamp| type| source ---|---|--- 2025-01-24 20:04:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3008...

GHSA-X99J-R8VV-GWWJ

creationtimestamp| type| source ---|---|--- 2025-01-24 17:05:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2948...

GHSA-FF6Q-3C9C-6CF5

creationtimestamp| type| source ---|---|--- 2025-01-14 23:09:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1633...

GO-2025-3371 WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover in github.com/h44z/wg-portal

WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover in github.com/h44z/wg-portal. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fr...