112490 matches found
CVE-2026-57940
HTMLy 3.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the RSS feed import functionality. The function getfeed in system/admin/admin.php passes user-supplied $feedurl directly to filegetcontents without any validation. An authenticated attacker with administrative privileges can...
RLSA-2026:29195 Important: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...
RLSA-2026:29703 Important: containernetworking-plugins security update
The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...
CVE-2026-13226
creationtimestamp| type| source ---|---|--- 2026-06-26 11:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp6swdzbgx26...
CVE-2026-1869
creationtimestamp| type| source ---|---|--- 2026-06-26 10:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp6oqm63do2a 2026-06-26 12:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp6wbqixpl22...
CVE-2026-57877
creationtimestamp| type| source ---|---|--- 2026-06-26 09:15:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp6ma3ng532x...
CVE-2017-4997
creationtimestamp| type| source ---|---|--- 2026-06-26 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6lrgnmto2h...
CVE-2026-39830
creationtimestamp| type| source ---|---|--- 2026-06-26 07:43:14+00:00| seen| https://gist.github.com/alon710/88958f43b0e7690b6916b9cfa5c9b9df 2026-07-15 16:40:07+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h 2026-09-03 06:10:05+00:00| seen|...
CVE-2017-14507
creationtimestamp| type| source ---|---|--- 2026-06-26 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6bpkzf2u2y...
Malicious code in react-context-form-tdsss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53e75a65681ee9ea818634ddee1ed52c6c8398dbd68e2b6abca255b24aaf37 [email protected] is a dependency-confusion payload. package.json declares scripts.preinstall="node index.js", and index.js issues an...
CVE-2026-8797
creationtimestamp| type| source ---|---|--- 2026-06-26 05:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp66slptia27 2026-06-26 05:45:02+00:00| seen| https://jvn.jp/en/jp/JVN35146924 2026-06-26 06:00:28+00:00| seen|...
MAL-2026-6503 Malicious code in js-price-client-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763a44df6481ee1948ff9fda0b3997a93001acb138b7bbcba1787c3f2f8699f2 On npm install, the package's postinstall script invokes prices in dist/index.js, which resolves the consumer's project root via process.env.INITCWD?...
MAL-2026-6497 Malicious code in chai-as-synced (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be17d22b28dc53ea46085190c1f5ff11ae16ce4b80539162d68c2ad2b224158e [email protected] impersonates the pino logger: it ships pino's README, LICENSE, docs/, index.d.ts and lib/ file layout proto.js, levels.js,...
CVE-2021-47987
creationtimestamp| type| source ---|---|--- 2026-06-26 02:47:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp5wkxsk6n2h...
Malicious code in mongoose-json-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910cc6eef707ac872daeb3a527e6dd9c75044ebb178f9eb48745f5cfd4123968 helpers.js defines a createLog helper that base64-decodes a constant HASHKEY to https://www.jsonkeeper.com/b/XVHGD an anonymous JSON-paste host and...
CVE-2026-9221
creationtimestamp| type| source ---|---|--- 2026-06-26 01:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5tqjbnne2b...
CVE-2026-9220
creationtimestamp| type| source ---|---|--- 2026-06-26 01:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5thiusz52o...
CVE-2025-71333
creationtimestamp| type| source ---|---|--- 2026-06-26 01:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sz445uz2z 2026-07-01 23:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmolxzozw2o 2026-07-02 05:07:06+00:00| seen|...
CVE-2025-71336
creationtimestamp| type| source ---|---|--- 2026-06-26 01:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5st4zv2y2p 2026-07-01 23:27:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmo77pnlq2i 2026-07-02 06:07:08+00:00| seen|...