40393 matches found
Axios NPM supply chain incident
Cisco Talos is actively investigating the March 31, 2026 supply chain attack on the official Axios node package manager npm package during which two malicious versions v1.14.1 and v0.30.4 were deployed. Axios is one of the more popular JavaScript libraries with as many as 100 million downloads pe...
CVE-2026-26477
creationtimestamp| type| source ---|---|--- 2026-04-03 16:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim67de7yf2d 2026-04-04 06:17:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minlmex7u227...
CVE-2025-59711
creationtimestamp| type| source ---|---|--- 2026-04-03 16:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim56zjduz2i 2026-04-04 06:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minlmldmuk27...
CVE-2026-25044
creationtimestamp| type| source ---|---|--- 2026-04-03 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4kcoevj2i 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
CVE-2026-31398
creationtimestamp| type| source ---|---|--- 2026-04-03 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4g6ct632t...
CVE-2026-31403
creationtimestamp| type| source ---|---|--- 2026-04-03 16:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim46qlf6e2n 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen...
CVE-2026-27124
creationtimestamp| type| source ---|---|--- 2026-04-03 16:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3y7nole2z 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
CVE-2026-25773
creationtimestamp| type| source ---|---|--- 2026-04-03 14:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milxakmfkh2t 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-03 15:23:07+00:00| published-proof-of-concept|...
CVE-2026-34208
creationtimestamp| type| source ---|---|--- 2026-04-03 14:05:15+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-2gg9-6p7w-6cpj 2026-04-06 16:23:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitofgjvct2h 2026-04-06...
CVE-2026-0686
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...
CVE-2026-35414
creationtimestamp| type| source ---|---|--- 2026-04-03 09:56:02+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3milhdeiiu22d 2026-04-27 18:30:06+00:00| seen| https://t.me/truesecator/8150 2026-04-29 07:06:34+00:00| seen|...
CVE-2026-34444
creationtimestamp| type| source ---|---|--- 2026-04-03 09:00:05+00:00| published-proof-of-concept| Telegram/iJe41NTkZQJK4wFVG9OP9y2V0JVLEcjlDCmGEFn1YNc-zvI 2026-04-06 17:32:38+00:00| seen| Telegram/n5Nok-XlRHEre5O89LvYLplT02rw8wZYprnGR4USXlLgM 2026-04-09 20:41:47+00:00| seen|...
CVE-2026-4350
creationtimestamp| type| source ---|---|--- 2026-04-03 08:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mile7cwvmq2r 2026-04-03 09:15:39+00:00| published-proof-of-concept| Telegram/NBs63VM2nQ9UbXE-D7ue-jsugZ5lhQP4O69jnOBlFC7zlLQ 2026-04-07 22:30:07+00:00| seen|...
CVE-2026-5456
creationtimestamp| type| source ---|---|--- 2026-04-03 08:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milckx2ssm2s...
CVE-2026-35508
creationtimestamp| type| source ---|---|--- 2026-04-03 04:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikuclweba2d...
CVE-2026-35507
creationtimestamp| type| source ---|---|--- 2026-04-03 04:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktznighg2q...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the POST multipart upload process. An attacker can write arbitrary files to any existing directory on the filesystem by crafting a specially constructed URL path containing directory traversal sequences and...
CVE-2026-25212
creationtimestamp| type| source ---|---|--- 2026-04-03 02:18:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miknqzz7no2b 2026-04-03 06:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mil2ad2pwf2x 2026-07-13 22:00:22+00:00| seen|...
CVE-2022-4986
creationtimestamp| type| source ---|---|--- 2026-04-03 00:45:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikikr7k4m24 2026-04-03 01:48:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mikm34mmcw2l...