123148 matches found
CVE-2026-16102
creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-12 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msuclvghtf22 2026-08-12 04:37:08+00:00| seen|...
Malicious code in typst-resume-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104d03639d9a9d48d03641fef83163391bb1540c8a01c56287bcaf8ca45ad01c index.js loads https, http, and childprocess at the top of the module and sends host/environment data to a hardcoded AWS Lambda URL at...
CVE-2026-7326
creationtimestamp| type| source ---|---|--- 2026-08-06 12:43:03+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msg2xcrimm2x 2026-08-06 16:15:37+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-7327
creationtimestamp| type| source ---|---|--- 2026-08-06 12:43:03+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msg2xcrimm2x 2026-08-06 16:15:40+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-11983
creationtimestamp| type| source ---|---|--- 2026-08-06 12:34:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e37ljvdasqskv...
MAL-2026-13402 Malicious code in jagproject (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5aa3a28b53c63f65ab724aebe774c23f737686f5db7411bfa871fa4f7eced lib/Socket/messages-send.js contains network destinations reconstructed via String.fromCharCode... arrays that decode to https://fiora.nixel.my.id/...
CVE-2026-5158
creationtimestamp| type| source ---|---|--- 2026-08-06 12:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ipkrbhjyaww72 2026-08-07 05:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshsfbxb772r...
CVE-2026-14522
creationtimestamp| type| source ---|---|--- 2026-08-06 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfxbfkv6f2r...
GHSA-H4MF-4V27-HGGJ
creationtimestamp| type| source ---|---|--- 2026-08-06 11:31:09+00:00| seen| https://gist.github.com/alon710/16a5e6da3d279fedecbd3519f100eaf1 2026-08-08 08:00:20+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mskm3mosqt2l...
CVE-2026-7441
creationtimestamp| type| source ---|---|--- 2026-08-06 09:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfpdjfetg2g...
CVE-2026-18325
creationtimestamp| type| source ---|---|--- 2026-08-06 08:55:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msfob5fryx2g 2026-08-06 22:15:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msh2wervyf24 2026-09-14 14:45:13+00:00| seen|...
CVE-2026-16636
creationtimestamp| type| source ---|---|--- 2026-08-06 08:54:44+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msfo72edfo2j 2026-08-07 02:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshidguasn2n...
CVE-2026-19021
creationtimestamp| type| source ---|---|--- 2026-08-06 08:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cqhoz3infbyc4...
CVE-2026-18597 Blind SSRF on Foxit PDF Services API
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...
EUVD-2026-53723
The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts...
CVE-2026-18325
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Record via Select Field in all versions up to, and including, 1.56.1 due to insufficient input sanitization and output escaping. This makes i...
CVE-2026-70431
creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5riptc32a...
EUVD-2026-53704
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Record via Select Field in all versions up to, and including, 1.56.1 due to insufficient input sanitization and output escaping. This makes i...
CVE-2026-67869
creationtimestamp| type| source ---|---|--- 2026-08-06 00:59:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msetnyu4se2t 2026-08-06 01:56:31+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msewt7h35e2l...
