Malicious code in bq-sdist-probe-vrp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61d3e118672e10f0dc02115acd8235c3b356d75e7cb59a69e26fec28070c814 setup.py executes at pip install time and performs installer-side credential and host reconnaissance. It queries the GCE/GCP metadata service at...

Server-side Request Forgery (SSRF)

Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the writepdf stylesheet and XMP metadata loading paths in weasyprint/document.py and weasyprint/pdf/init.py. An attacker can make the rendering process...

CVE-2026-0310

creationtimestamp| type| source ---|---|--- 2026-09-09 16:10:42+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117241953681889456 2026-09-09 16:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117241961119105876 2026-09-09 17:06:37+00:00| seen|...

Malicious code in @staticj/cropperxmjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac36a108b1e9c92a64955277bdfe9a09cdae61504e9a1bfaf40a15c50595139a @staticj/[email protected] ships a modified cropper.min.js that impersonates the legitimate Cropper.js library. At library load, injected code...

MAL-2026-16082 Malicious code in @umschool/platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c @umschool/[email protected] is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape use...

Regular Expression Denial of Service (ReDoS)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the Actor.fromstring parsing in git/util.py. An attacker can exhaust CPU and stall commit metadata access by supplying a...

CVE-2026-87821

Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...

CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...

CVE-2026-87821

Lara Dashboard versions 0.9.2 through 1.3.1 are affected by a Server-Side Request Forgery (SSRF) in the POST /api/admin/builder/markdown/fetch endpoint. Any authenticated user can supply a malicious URL without host validation or redirect restrictions , allowing them to read the response body of ...

EUVD-2026-74847

Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...

CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...

Improper Preservation Of Message Metadata

Spring Integration is vulnerable to improper preservation of message metadata. The vulnerability is due to reply and propagated headers being copied from the most recently consumed upstream message when .fluxTransform processes raw payloads asynchronously or out of order, which allows an attacker...

BIT-ELK-2026-78595 Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization CWE-862 in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse CAPEC-122. An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent...

GHSA-WVXP-WPWP-MMPW

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:09+00:00| seen| https://t.me/IntelEncyclopedia/2853 2026-09-10 00:00:46+00:00| seen| https://t.me/IntelEncyclopedia/2853...

CVE-2026-52307

creationtimestamp| type| source ---|---|--- 2026-09-09 04:00:37+00:00| seen| Telegram/nMh3ts5dc8zkSwTaV9m7alIlypUPowc3P5Zcioq1A5ss 2026-09-09 15:05:47+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mv3srtbm7225 2026-09-10 00:00:24+00:00| published-proof-of-concept|...

argus-poc-index

argus-poc-index Public ARGUS metadata, maintained independent...

CVE-2026-87657

creationtimestamp| type| source ---|---|--- 2026-09-09 01:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/356y2aim7dvwv 2026-09-10 04:46:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:46:27+00:00| seen|...

Malicious code in @yongot/canary-mcp-isolation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff9f45262c13bea579ed092cabfb043896d60c89787301b73eef78848802574 package.json declares a postinstall script that runs beacon.js, and index.js also requires beacon.js on load. beacon.js POSTs the installer's...

MAL-2026-16061 Malicious code in @yongot/canary-mcp-isolation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff9f45262c13bea579ed092cabfb043896d60c89787301b73eef78848802574 package.json declares a postinstall script that runs beacon.js, and index.js also requires beacon.js on load. beacon.js POSTs the installer's...

SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...