CVE-2026-67873

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msg5ozhrsh2l 2026-08-07 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjovqihua2o 2026-08-08 00:48:57+00:00| seen|...

CVE-2026-52466

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msg5oy5zy22s...

Malicious code in @activepieces/piece-base44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183bc897806f97f30cf26098efd5714de47475d007a7d5e23fe8fb05dbfe9df7 src/index.js requires childprocess and issues a ping command at line 16, with multiple POST calls at lines 13, 14, and 29 to hardcoded destinations...

CVE-2026-0516

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4ibyz3425 2026-09-06 20:13:03+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3muuskhrap22n...

CVE-2026-61545

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...

CVE-2026-16100

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

CVE-2026-15572

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-11 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrorot2pu2b...

CVE-2026-16442

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-26 00:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx3uwafus2p 2026-08-26 01:25:13+00:00| seen|...

Malicious code in @activepieces/piece-google-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e200ba4f9d11d42636dbbd1fa698843321af8b0bd23ff63493c0ce94891a5cb src/index.js imports childprocess and issues POST requests alongside a ping command invocation lines 25, 38, 49. The co-occurrence of childprocess...

Malicious code in @activepieces/piece-google-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d347d6252c2a1bb21b4318c0a319be36d60a95b4146d91108cee13d52c5759 The published tarball for @activepieces/piece-google-forms 0.5.7 contains src/index.js which imports childprocess, invokes ping-style OS command...

MAL-2026-13396 Malicious code in @activepieces/piece-google-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d347d6252c2a1bb21b4318c0a319be36d60a95b4146d91108cee13d52c5759 The published tarball for @activepieces/piece-google-forms 0.5.7 contains src/index.js which imports childprocess, invokes ping-style OS command...

CVE-2026-19035

creationtimestamp| type| source ---|---|--- 2026-08-06 12:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5zzhrkd3qttpp...

CVE-2026-20288

creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

CVE-2026-5158

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-18654

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:19+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfpk5xb2k...

CVE-2026-7693

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfzfep7552j...

CVE-2026-70556

Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenticated user's account by submitting a...

CVE-2026-18649

creationtimestamp| type| source ---|---|--- 2026-08-06 12:02:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfyo4ynu22q 2026-08-06 12:02:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048457828808782 2026-08-07 10:12:54+00:00|...

EUVD-2026-53863

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-5651

creationtimestamp| type| source ---|---|--- 2026-08-06 11:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfw24rww22r 2026-08-06 11:32:54+00:00| seen| https://bsky.app/profile/potato.software/post/3msfwzuowjz2s...