50229 matches found
CVE-2026-59703
creationtimestamp| type| source ---|---|--- 2026-07-08 18:02:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5pbiipf427...
CVE-2026-57111
creationtimestamp| type| source ---|---|--- 2026-07-08 17:59:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5p4vvi7a24 2026-07-09 23:10:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqx2ggqy2e...
CVE-2026-59874
creationtimestamp| type| source ---|---|--- 2026-07-08 17:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5opkl5622x 2026-07-11 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqecrablfk2f 2026-07-20 22:35:09+00:00| published-proof-of-concept|...
CVE-2026-29009
creationtimestamp| type| source ---|---|--- 2026-07-08 17:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n5jdpza2x 2026-07-09 04:02:39+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq6qsygvcf2s...
CVE-2026-59261
creationtimestamp| type| source ---|---|--- 2026-07-08 17:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n2dzrvk2g 2026-07-14 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqn7qqgi3z25...
CVE-2026-42505
creationtimestamp| type| source ---|---|--- 2026-07-08 17:20:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5mx4lmyo2y 2026-07-09 12:00:57+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq7lkaehpi2d 2026-07-12 12:00:56+00:00| seen|...
MAL-2026-6988 Malicious code in @vite-tab/tab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af865d1cf7d45f2b4c2a73eebcfcd1a1a6aba9a36f33bf8256ef4d7235903c @vite-tab/tab republishes Vite's codebase under a different name while impersonating the upstream project: package.json declares bin: vite:...
CVE-2026-58657
creationtimestamp| type| source ---|---|--- 2026-07-08 16:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ldyi3xf26 2026-09-17 00:31:25+00:00| seen| https://gist.github.com/alon710/9e473404cc3dda3bbd60707d9a5ddbdd 2026-09-17 00:35:03+00:00| published-proof-of-concept|...
CVE-2026-9074
creationtimestamp| type| source ---|---|--- 2026-07-08 16:42:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kryt5gx2v 2026-07-08 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ohuyub52l 2026-07-11 04:07:06+00:00| seen|...
CVE-2026-49147
creationtimestamp| type| source ---|---|--- 2026-07-08 16:41:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5kreqe252c...
MAL-2026-7000 Malicious code in pipo-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259159c0505b819905dcaf53172d98a4fd590a9ae1a40f87d2be4c1a7fdc4065 This package is a dependency-confusion payload published at an abnormally high version 9999.0.0 targeting an internal package name pipo-sdk. The...
Malicious code in goofy-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779daa3389f4ff3ea7ca2acb4e0202b4465e90fa0d8b7bdcc0e3785f34e454a2 [email protected] is a dependency-confusion squat: the version is inflated to 9999.0.0 to shadow an internal package of the same name in build syste...
Malicious code in ronyfortest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9f63368f7e1147ade261a87f45e32e13bcf79b5336efad59087ce85e64a849 The package's postinstall hook node index.js runs automatically on npm install and collects the installer's OS username os.userInfo.username, hostnam...
CVE-2026-59725
Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...
CVE-2026-59702
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-56775
creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5jcs7swc2k...
CVE-2026-14454
creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jcpi77c2k 2026-07-09 17:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqa5po5axo24...
CVE-2026-59253
creationtimestamp| type| source ---|---|--- 2026-07-08 16:12:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5j5g5ct72l...