Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI)

Source: amazon-inspector 55fc219f03cbaeeedb660ad423cc7af08ff1d29154c8b8989b7b0c5d7d5c3d75 setup.py installs a.pth file containing import gttesterexpprofilerexp00000015.probe; probe.runprobe, causing every Python interpreter start on the installer's machine to execute the package's probe module. T...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

Malicious code in auth0-open-source-template (PyPI)

Source: kam193 c14dd94f3cdea34f9073f26be0716cfd944e0362396ae1dccab12196021a328c The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration for a known application, but containing only a "telemetry"...

CVE-2026-64825

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atzcqtu2s...

CVE-2026-64824

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-28317

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...

CVE-2026-28316

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amuchyj2a 2026-08-11 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mst7fejbrg2e...

CVE-2026-28314

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...

CVE-2026-16447

creationtimestamp| type| source ---|---|--- 2026-07-21 16:37:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr6amohkrb2g...

cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

A flaw was found in Cargo. When processing crate tarballs from third-party registries, Cargo mishandled symbolic links symlinks embedded within these archives. This vulnerability enables a malicious crate to overwrite the source code of another crate originating from the same registry. Such an...

CVE-2026-28313

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...

CVE-2026-28312

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajbif3b23 2026-07-26 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrksvpexrs23...

CVE-2026-28310

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afpcpwm2q 2026-07-26 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrldo4thtn23...

CVE-2026-28308

creationtimestamp| type| source ---|---|--- 2026-07-21 16:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ac5ttqj2v 2026-07-26 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrlacu7ll72l...

CVE-2026-28306

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6ldxen24 2026-07-26 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl4xkp7un23...

CVE-2026-28305

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6k36ek2s 2026-07-26 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl3bvzuid2y...

CVE-2026-28304

creationtimestamp| type| source ---|---|--- 2026-07-21 16:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a2yshpb2v 2026-07-26 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkzmbga6l23...

CVE-2026-28302

creationtimestamp| type| source ---|---|--- 2026-07-21 16:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a2xgjpu2r 2026-07-26 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrlfdry56g2y...

CVE-2026-65048

creationtimestamp| type| source ---|---|--- 2026-07-21 15:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr65bleqo52e 2026-07-23 01:01:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrbn7txhu52l 2026-07-23 02:02:33+00:00| seen|...