CVE-2026-43723

creationtimestamp| type| source ---|---|--- 2026-07-27 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnyt7hlpa2e 2026-07-28 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:20:36+00:00|...

CVE-2026-43749

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysyqcws2c 2026-07-28 04:49:31+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:44+00:00|...

CVE-2026-43776

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysrrtak2j 2026-07-28 04:50:26+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:18:45+00:00|...

CVE-2026-66758

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnysl4cri2v...

Malicious code in grateful-checkout (npm)

Source: amazon-inspector c2a9600ad3ee3fddd9f06425260c94edf660263800080787155a63d3e5212d12 On npm install, the postinstall hook in src/canary.js performs a DNS lookup and an HTTPS GET to a serveo tunnel host 96e03fa6c292469a-172-245-86-254.serveousercontent.com/canary-install?pkg=...&ver=...,...

Malicious code in rakibox (npm)

Source: amazon-inspector 8c59dad78f7e47be7f92d7ab89e245bb096f2e4f8679e73f00934016f1823625 Package is advertised as 'A minimalist Git wrapper tool'. When the user runs the documented rakibox push command, the CLI recursively walks the current working directory skipping only nodemodules,.git,.env,...

CVE-2016-0304

creationtimestamp| type| source ---|---|--- 2026-07-27 22:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnxidsumb2v...

CVE-2026-56747

creationtimestamp| type| source ---|---|--- 2026-07-27 22:20:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrnwjsjoem2m...

CVE-2026-42016

creationtimestamp| type| source ---|---|--- 2026-07-27 22:15:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrnwcdjy562j 2026-07-31 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxud4e2ri25 2026-09-11 11:18:06+00:00| seen|...

CVE-2026-59239

creationtimestamp| type| source ---|---|--- 2026-07-27 21:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrntd4xjjg2i...

CVE-2026-59728

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-51235

creationtimestamp| type| source ---|---|--- 2026-07-27 21:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrnsibng2e22...

CVE-2026-40000

creationtimestamp| type| source ---|---|--- 2026-07-27 21:00:03+00:00| seen| https://t.me/GithubRedTeam/95414 2026-07-28 00:00:06+00:00| seen| Telegram/Z8MJvZKIEcDmGh4i1fEO99rb4U3MajnIQlHtygmI2wCAmPc 2026-07-28 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95414 2026-07-2...

CVE-2017-8613

creationtimestamp| type| source ---|---|--- 2026-07-27 20:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnqrqzvfx22...

crowdsec v1.8.0-rc1

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

CVE-2026-17530

creationtimestamp| type| source ---|---|--- 2026-07-27 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17530...

CVE-2014-2029

creationtimestamp| type| source ---|---|--- 2026-07-27 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnp45chzd2m...

CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

EUVD-2026-49584

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...