CVE-2026-15156

creationtimestamp| type| source ---|---|--- 2026-07-21 05:53:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54n2liks2q...

CVE-2023-37507

creationtimestamp| type| source ---|---|--- 2026-07-21 05:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54h3evhj27...

GHSA-V422-HMWV-36X6

creationtimestamp| type| source ---|---|--- 2026-07-21 05:31:05+00:00| seen| https://gist.github.com/alon710/b2e2ae2f4c7c5ec01435305f8e986e39...

MAL-2026-10970 Malicious code in consumerweb-calurls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669d269ba4f32fdf1b9c8858544848525f323074fba69e9f84a2974504adfc17 [email protected] ships an effectively empty package empty index.js, no lifecycle scripts whose sole effect on install is to resolve a runti...

CVE-2026-59776

creationtimestamp| type| source ---|---|--- 2026-07-21 04:45:05+00:00| seen| https://jvn.jp/en/jp/JVN40509781 2026-07-21 05:57:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54trr3hu23 2026-07-21 08:15:05+00:00| seen|...

GHSA-529G-XQ4F-CW38

creationtimestamp| type| source ---|---|--- 2026-07-21 04:31:23+00:00| seen| https://gist.github.com/alon710/108624152e69003362bd827cbabc8c78...

CVE-2026-57852

creationtimestamp| type| source ---|---|--- 2026-07-21 03:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4vqc72kz2e...

CVE-2026-63728

creationtimestamp| type| source ---|---|--- 2026-07-21 02:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4scbfod72b...

CVE-2026-16327

creationtimestamp| type| source ---|---|--- 2026-07-21 02:43:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4rzcvi4x2x...

CVE-2026-55831

creationtimestamp| type| source ---|---|--- 2026-07-21 02:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4rqebgbg2x 2026-07-22 22:35:24+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w 2026-08-10 13:20:13+00:00| seen|...

GHSA-F283-GHQC-FG79

creationtimestamp| type| source ---|---|--- 2026-07-21 02:31:08+00:00| seen| https://gist.github.com/alon710/2702abf20f9326c55748b684ae709cc9...

CVE-2026-55833

creationtimestamp| type| source ---|---|--- 2026-07-21 02:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4qlzdkjo2o 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-22 22:35:22+00:00| published-proof-of-concept|...

CVE-2026-48349

creationtimestamp| type| source ---|---|--- 2026-07-21 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l...

CVE-2026-59727

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...

GHSA-H95V-H523-3MW8

creationtimestamp| type| source ---|---|--- 2026-07-21 00:31:29+00:00| seen| https://gist.github.com/alon710/07f073f92ce20c0890f37523b73f7af8...

EUVD-2026-46141

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

XSSer Penetration Testing Tool 1.9

XSSer is an open source penetration testing tool that automates the process of detecting and exploiting XSS injections against different applications. It contains several options to try to bypass certain filters, and various special techniques of code injection. 12 additions, 12 modifications, 10...

CVE-2026-57495

creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...

CVE-2026-57355

creationtimestamp| type| source ---|---|--- 2026-07-20 23:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4hxrfgkg2n 2026-07-21 09:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr5jinmkg227 2026-07-21 19:44:08+00:00| seen|...

XML Injection

Overview @astrojs/rss is an Add RSS feeds to your Astro projects Affected versions of this package are vulnerable to XML Injection via the source.title and enclosure.type fields, which are interpolated directly into XML templates without proper escaping. An attacker can inject arbitrary XML...