CVE-2026-6141

creationtimestamp| type| source ---|---|--- 2026-04-12 16:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-6141 2026-04-13 02:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjduepjwot23...

MAL-2026-2611 Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

Malicious code in upstart-loan-status (npm)

Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...

MAL-2026-2612 Malicious code in upstart-loan-status (npm)

Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...

CVE-2026-6137

creationtimestamp| type| source ---|---|--- 2026-04-12 07:39:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116390595889322157 2026-04-13 01:17:42+00:00| published-proof-of-concept| Telegram/nag6kHTmr7R2m3RBAp9Z6zI9Kn5ruvnm4vlyMwU2lthiM 2026-04-13 01:21:07+00:00| seen|...

MINI-HFW7-GGC5-WP62

Bulletin has no description...

MINI-47R6-X374-3JC3

Bulletin has no description...

MINI-P43P-5V5J-Q82P

Bulletin has no description...

MINI-PQH5-96JF-34H4

Bulletin has no description...

MINI-FHH6-XFQJ-HM7H

Bulletin has no description...

MINI-VC3Q-FQJ4-2CV2

Bulletin has no description...

SUSE CVE-2024-21061

unknown...

CVE-2025-6986

creationtimestamp| type| source ---|---|--- 2026-04-11 06:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj77kqm4jb2u...

CVE-2026-5053

creationtimestamp| type| source ---|---|--- 2026-04-11 02:29:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6s42y42p23 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w 2026-04-16 09:07:08+00:00| seen|...

CVE-2026-1502

creationtimestamp| type| source ---|---|--- 2026-04-11 02:20:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6rmgmnnj2t 2026-04-13 13:35:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjeyb3uf572r 2026-04-25 16:17:41+00:00| seen|...

CVE-2026-3358

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7. This is due to missing poststatus validation in the enrollnow and courseenrollment functions. Both enrollment endpoints...

CVE-2026-3358

CVE-2026-3358 affects the Tutor LMS WordPress plugin up to version 3.9.7. The root cause is missing post_status validation in enroll_now() and course_enrollment() (no check for private post_status) allowing authenticated users with Subscriber-level access or higher to enroll in private courses vi...

CVE-2026-3358 Tutor LMS <= 3.9.7 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Private Course Enrollment

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7. This is due to missing poststatus validation in the enrollnow and courseenrollment functions. Both enrollment endpoints...

PT-2026-32084

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7. This is due to missing post status validation in the enroll now and course enrollment functions. Both enrollment endpoints...