124537 matches found
CVE-2026-8797
creationtimestamp| type| source ---|---|--- 2026-06-26 05:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp66slptia27 2026-06-26 05:45:02+00:00| seen| https://jvn.jp/en/jp/JVN35146924 2026-06-26 06:00:28+00:00| seen|...
MAL-2026-6503 Malicious code in js-price-client-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763a44df6481ee1948ff9fda0b3997a93001acb138b7bbcba1787c3f2f8699f2 On npm install, the package's postinstall script invokes prices in dist/index.js, which resolves the consumer's project root via process.env.INITCWD?...
MAL-2026-6497 Malicious code in chai-as-synced (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be17d22b28dc53ea46085190c1f5ff11ae16ce4b80539162d68c2ad2b224158e [email protected] impersonates the pino logger: it ships pino's README, LICENSE, docs/, index.d.ts and lib/ file layout proto.js, levels.js,...
CVE-2021-47987
creationtimestamp| type| source ---|---|--- 2026-06-26 02:47:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp5wkxsk6n2h...
Malicious code in set-cookie-ease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bf656ba38b4d951239ee29799f510de4a8cb93fcf5d8005db4cd679a8631e6 Package masquerades as js-cookie same banner /! js-cookie v3.0.5 | MIT /, README, and repository.url: git://github.com/js-cookie/js-cookie.git but...
Malicious code in mongoose-json-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910cc6eef707ac872daeb3a527e6dd9c75044ebb178f9eb48745f5cfd4123968 helpers.js defines a createLog helper that base64-decodes a constant HASHKEY to https://www.jsonkeeper.com/b/XVHGD an anonymous JSON-paste host and...
CVE-2026-9221
creationtimestamp| type| source ---|---|--- 2026-06-26 01:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5tqjbnne2b...
CVE-2026-9220
creationtimestamp| type| source ---|---|--- 2026-06-26 01:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5thiusz52o...
CVE-2025-71333
creationtimestamp| type| source ---|---|--- 2026-06-26 01:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sz445uz2z 2026-07-01 23:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmolxzozw2o 2026-07-02 05:07:06+00:00| seen|...
CVE-2025-71336
creationtimestamp| type| source ---|---|--- 2026-06-26 01:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5st4zv2y2p 2026-07-01 23:27:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmo77pnlq2i 2026-07-02 06:07:08+00:00| seen|...
CVE-2025-71340
creationtimestamp| type| source ---|---|--- 2026-06-26 01:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sef4f3q2a...
CVE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...
CVE-2026-48615
Summary: CVE-2026-48615 concerns a flaw in Node.js proxy tunnel error handling that can expose proxy credentials embedded in the proxy URL via the ERR_PROXY_TUNNEL error messages. The leak is tied to error handling paths and could be captured by logs, diagnostics, or other error consumers. Affect...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
EUVD-2026-39605
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...