36522 matches found
CVE-2026-46701
creationtimestamp| type| source ---|---|--- 2026-05-16 15:11:55+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-j3vx-cx2r-pvg8 2026-06-17 22:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c 2026-06-19...
CVE-2026-46695
creationtimestamp| type| source ---|---|--- 2026-05-16 09:54:51+00:00| published-proof-of-concept| https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-g6ww-w5j2-r7x3 2026-06-11 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnxwahnqhu2e 2026-06-11 01:00:59+00:0...
CVE-2026-46625
creationtimestamp| type| source ---|---|--- 2026-05-16 05:48:24+00:00| published-proof-of-concept| https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j 2026-06-10 23:09:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnxtfp7clr23...
Arbitrary Code Execution
GitHub Copilot CLI is vulnerable to Arbitrary Code Execution. The vulnerability is due to unsafe handling of Git repository configuration during repository discovery, where a malicious nested bare Git repository can define executable configuration options that are automatically invoked during Git...
CVE-2026-46679
creationtimestamp| type| source ---|---|--- 2026-05-16 03:00:35+00:00| published-proof-of-concept| https://github.com/libp2p/js-libp2p/security/advisories/GHSA-4f8r-922h-2vgv 2026-06-11 03:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyabxorjg2g 2026-06-11...
MSC-2025-8557
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8556
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8558
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8555
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8554
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8553
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8551
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8552
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8548
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8547
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8549
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8546
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8545
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8544
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...
MSC-2025-8543
This package version was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...