Protection Mechanism Failure

Overview enclave-vm is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Protection Mechanism Failure via the exposure of a host-side Error object to sandboxed code, which retains its host realm prototype chain. An attacker can intentionall...

EUVD-2026-2068

Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user...

EUVD-2026-2134

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...

January 13, 2026—KB5073724 (OS Builds 19045.6809 and 19044.6809)

None None...

MiracleLinux 9 : java-1.8.0-openjdk-1.8.0.462.b08-3.el9.ML.1 (AXSA:2025-10686:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10686:14 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Bette...

Malicious Package

Overview @maxcointech/simple-string-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late

The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late By Mark Joseph Marti · January 12, 2026 Introduction As one of the world's largest social media platforms, with over 3 billion active users, Facebook is a frequent target for phishing scams. Hackers aim to hijack use...

CVE-2025-66050

CVE-2025-66050 (Vivotek IP7137, firmware 0200a) is linked to multiple issues: path traversal (CVE-2025-66051), information disclosure via RTSP without authentication (CVE-2025-66049), and command injection through /cgi-bin/admin/setparam.cgi (CVE-2025-66052). All references indicate default admin...

CVE-2024-41804

Xibo is a content management system CMS. An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet Column Formulas. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially...

CVE-2025-23870

Cross-Site Request Forgery CSRF vulnerability in wygk Copyright Safeguard Footer Notice copyright-safeguard-footer-notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through = 3.0...

CVE-2026-22712

creationtimestamp| type| source ---|---|--- 2026-01-09 01:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdtnq37c2o...

CVE-2025-63611

creationtimestamp| type| source ---|---|--- 2026-01-08 20:26:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwswjyjvb2e 2026-01-09 18:33:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbz547se6e22...

CVE-2025-27002

creationtimestamp| type| source ---|---|--- 2026-01-08 11:04:03+00:00| seen| https://gist.github.com/Darkcrai86/3138a900c4bfa360837cebbf4466b279 2026-01-08 17:13:19+00:00| published-proof-of-concept| Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg 2026-01-08 17:13:43+00:00| seen|...

RHSA-2026:0234

creationtimestamp| type| source ---|---|--- 2026-01-08 07:58:30+00:00| seen| https://gist.github.com/Darkcrai86/dd788ac5c935d04107e9a1f5a659a787...

CVE-2026-22185

creationtimestamp| type| source ---|---|--- 2026-01-07 22:11:42+00:00| seen| Telegram/yOJ1PSYGZXjuMcefNZXs0T-wgrkZSLsS2STBsZb-16oZ8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2019-16658

TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...

CVE-2023-27593 vulnerabilities

Vulnerabilities for packages: cilium...

CVE-2025-69084

creationtimestamp| type| source ---|---|--- 2026-01-06 18:07:43+00:00| seen| Telegram/2JFIlsludB2BcoY20V82c0ESHPbtXQoup4wpLAPUk9R9uuY...

Malicious Package

Overview smartspacestoreapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-0909

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser. Such manipulation of the argument passwd1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and...