Lucene search
+L

10006 matches found

Vulnrichment
Vulnrichment
added 2026/02/11 10:58 p.m.5 views

CVE-2026-20623

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/11 10:58 p.m.31 views

CVE-2026-20674

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information...

0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/11 10:58 p.m.6 views

CVE-2026-20606

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to bypass certain Privacy preferences...

5.8AI score0.00136EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/02/11 3:13 p.m.5 views

Malicious Package

Overview systemtest-network is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/11 3:13 p.m.6 views

Malicious Package

Overview osopackage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/11 2:19 p.m.4 views

Malicious Package

Overview chai-prop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/11 10:54 a.m.5 views

Malicious Package

Overview sinon-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.11 views

PT-2026-7746

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 macOS versions prior to Sonoma 14.8.4 macOS versions prior to Sequoia 15.7.4 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description An application may be able to bypass certain Privacy...

5.3AI score0.00136EPSS
SaveExploits0References7
Snyk
Snyk
added 2026/02/10 10:0 p.m.6 views

Malicious Package

Overview graphlibx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 4:35 p.m.5 views

Malicious Package

Overview @ux-foundry/palette is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 4:34 p.m.4 views

Malicious Package

Overview @snazah/davey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 4:30 p.m.4 views

Malicious Package

Overview @reimorg/config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 4:30 p.m.3 views

Malicious Package

Overview @uniconvex/dotenv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 3:58 p.m.7 views

Malicious Package

Overview sap-code-style-guides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 3:56 p.m.4 views

Malicious Package

Overview chai-as-approved is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/10 3:46 p.m.3 views

Malicious Package

Overview graphflowx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/09 5:25 p.m.4 views

Malicious Package

Overview json-web-sources is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/09 5:25 p.m.3 views

Malicious Package

Overview json-mapping-sources is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/02/06 8:58 p.m.12 views

`finch-rust` was removed from crates.io for malicious code

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...

5.3AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/02/06 8:55 p.m.12 views

`evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

5.3AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder