GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundreds of Python repositories. "The attack targets Python projects — including Django apps, ML research code, Streamlit dashboards, and PyPI packages — by...

EUVD-2026-12107

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

About the Remote Code Execution Vulnerability - n8n (CVE-2025-68613)

About Remote Code Execution Vulnerability - n8n CVE-2025-68613. n8n is a workflow automation platform available under a fair-code license. Improper Control of Dynamically-Managed Code Resources CWE-913 in the n8n workflow expression evaluation system allows a remote authenticated attacker without...

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information stealer called MacSync. "Unlike traditional exploit-based attacks, this method relies entirely on user interaction – usually in the form of copying and executing commands –...

Fedora: Security Advisory (FEDORA-2026-2c281f4add)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-4V26-V6CG-G6F9 vulnerabilities

Vulnerabilities for packages: zabbix, zabbix-fips...

Fedora 42 : golang-github-openprinting-ipp-usb (2026-2c281f4add)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2c281f4add advisory. 0.9.31 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

GHSA-WCXR-59V9-RXR8

creationtimestamp| type| source ---|---|--- 2026-03-14 06:40:06+00:00| seen| https://gist.github.com/alon710/04f59b4b34fdad62bcd6aca02cca19bb 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

CVE-2026-32815

creationtimestamp| type| source ---|---|--- 2026-03-14 05:26:51+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xp2m-98x8-rpj6...

GHSA-G353-MGV3-8PCJ

creationtimestamp| type| source ---|---|--- 2026-03-14 04:40:05+00:00| seen| https://gist.github.com/alon710/6d8cc1349cbd20b4b2228bf8920e9f07 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

GHSA-44VG-5WV2-H2HG

creationtimestamp| type| source ---|---|--- 2026-03-14 02:40:05+00:00| seen| https://gist.github.com/alon710/1291af57a3f24c084d79b6036abb3239...

GHSA-GW82-5JC5-87CJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-43W8-4Q7X-65HJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CGHR-H62W-2FC6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GC25-M8G6-JP4F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C8GQ-RHQH-WGWM vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-30464

creationtimestamp| type| source ---|---|--- 2026-03-13 18:23:34+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30464.yaml...

Exploit for Improper Input Validation in Toolkit_Project Toolkit

gha-exploit-guard Standalone GitHub Action that scans GitHub...

GHSA-P9X5-JP3H-96MM

creationtimestamp| type| source ---|---|--- 2026-03-13 01:50:05+00:00| seen| https://gist.github.com/alon710/dd7ce6343fb3c4caed99cdfa0a07695a...

Linux Distros Unpatched Vulnerability : CVE-2026-31900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, usepyproject: true, for...