SkillCyberPunk

Security Vulnerability Scanner A Claude Code plugin that auto...

GHSA-QF73-2HRX-XPRP

creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:25+00:00| published-proof-of-concept| Telegram/uNEbWTFRO9kglbQXnY7zSMHaUxTxgzOMmWKv2o-GlQMO0RY...

CVE-2025-24266

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:18+00:00| seen| Telegram/P5-d6aZOqF55QElx3cS6BOd0aPe5lgIDzzkyeelTZVJswY 2026-04-02 22:15:27+00:00| seen| Telegram/zRO4yDgOkqitQ-0uPFlpuBUiTVJii3PBjh2HUkR1y964uzw...

CVE-2026-34245

creationtimestamp| type| source ---|---|--- 2026-03-27 19:13:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2t7nkm2g25 2026-03-29 15:41:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2rm7-j397-3fqg...

report

...

Assignment

Assignment Sql injection on a...

CVE-2025-15568

creationtimestamp| type| source ---|---|--- 2026-03-09 16:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-15568 2026-03-18 02:38:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhchfo4wgj2t...

PT-2026-23857

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.10 Parse Server versions prior to 9.5.0-alpha.11 Description Parse Server is an open source backend deployable on Node.js infrastructures. The Google, Apple, and Facebook authentication adapters utilize JWT...

📄 WordPress AI Engine: ChatGPT Chatbot 1.9.98 Shell Upload

This is a proof of concept that demonstrates the CVE-2023-51409 vulnerability in the WordPress AI Engine plugin in a controlled, safe, and non-destructive manner. It detects the plugin, tests unauthenticated access to the vulnerable endpoint, performs safe file uploads with non-executable content...

`time_calibrator` was removed from crates.io due to malicious code

It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...

Path Traversal via Prefix Match Bypass in `_get_os_path`

This report is not public...

GHSA-P5VF-5754-X7P3 `polymarket-client-sdks` was removed from crates.io for malicious code

It appeared to be typosquatting existing crate polymarket-client-sdk sdks vs sdk and attempting to steal credentials from local files. The malicious crate had 1 version published on 2026-02-09 and had been downloaded only 33 times. There were no crates depending on this crate on crates.io. Thanks...

CVE-2026-1560

creationtimestamp| type| source ---|---|--- 2026-02-11 09:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mel4hgvx7e2a 2026-02-11 09:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116051177122807179 2026-02-11 09:59:59+00:00| seen|...

CVE-2025-9974

creationtimestamp| type| source ---|---|--- 2026-02-02 17:15:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvdvgl5k324 2026-07-09 08:53:47+00:00| seen| https://bsky.app/profile/femboyfurry.net/post/3mq7b3dqwks2b...

CVE-2026-1449

creationtimestamp| type| source ---|---|--- 2026-01-27 03:52:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdeuadas2b23...

CVE-2026-22469

creationtimestamp| type| source ---|---|--- 2026-01-22 17:41:38+00:00| seen| https://gist.github.com/Darkcrai86/719f145d4565873b89d957c00caad383...

CVE-2026-22807

creationtimestamp| type| source ---|---|--- 2026-01-21 22:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxpbqntmt22 2026-01-22 02:37:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy5qja7p22t...

CVE-2026-21951

...

EUVD-2026-3455

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-2859

MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam...