CVE-2026-54768

creationtimestamp| type| source ---|---|--- 2026-08-01 00:35:06+00:00| published-proof-of-concept| https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-jhh7-832h-f8hv 2026-08-01 01:31:13+00:00| seen| https://gist.github.com/alon710/662b2c487ba3f86d2983484c0e6fc728...

CVE-2026-55499

CVE-2026-55499 (Cloudreve) Prior to version 4.17.0, an authenticated recipient of a single-file share can receive real-time events for files in the owner’s parent folder, not just the shared item. The mechanism subscribes to the owner’s parent ID for a single-file share root, and the event hub fa...

CVE-2026-54661

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:17+00:00| published-proof-of-concept| https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-38c3-wv3c-v3xj 2026-07-29 16:37:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsed7ojg425 2026-07-2...

CVE-2015-2514

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:23+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:07+00:00| seen|...

CVE-2026-9720

The Facturación Electrónica Costa Rica plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the global scope, included by fvcradminpagehtml function. This makes it possible for...

PT-2026-65950

Aeon load human activity segmentation datasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a...

EUVD-2026-49136

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

CVE-2026-40000

The CVE-2026-40000 entry concerns ZTE File Manager’s Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity, used to preview compressed files. Third-party apps can launch this Activity and supply arbitrary file paths (e.g., content://zte.com.cn.filer.fileprovider/root_path), allowing acce...

CVE-2026-40000 Path Traversal Vulnerability in ZTE Blade A75 5G

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

PT-2026-64874

Name of the Vulnerable Software and Affected Versions ZTE File Manager affected versions not specified Description The zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity activity is intended to preview compressed files. Third-party applications can launch this activity and provide arbitrary fi...

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a523a0f2bb0df423657f50e42be71ae87d3071b859e1f4eb88a90709ba0ca5 Package name typosquats swiper/swiper-angular at implausible version 5.9999.1. The preinstall.js script runs at install time and collects installer...

Malicious code in whs4_deu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5a7dc2cf8fe83229aec6f45e6008ce2b353039a87607b930eb44928f97538c package.json declares a postinstall hook that runs index.js on npm install. On execution, index.js POSTs the installer's absolute filename path which...

Malicious code in wsh4_edu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0757eee7b6324baca2e2b28261c7ff072c60d578c827a14c1fa54f690b1cd53a The package's postinstall hook runs index.js, which POSTs the installer's absolute filesystem path via filename with sendFullPath: true, Node.js...

Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e866098aa6115f837577cc3b24eae409fb1fb67167757f2f0c5517dfa9d8d209 The package's preinstall hook runs index.js, which collects hostname, platform, architecture, home directory, and DNS server list via the Node os...

MAL-2026-11061 Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e866098aa6115f837577cc3b24eae409fb1fb67167757f2f0c5517dfa9d8d209 The package's preinstall hook runs index.js, which collects hostname, platform, architecture, home directory, and DNS server list via the Node os...

MAL-2026-11057 Malicious code in merchantprefsservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145fc1d224cc012a8cbdea5823b1573df6400ce6a24837b2c25710772152724f The package's preinstall script index.js executes automatically on npm install and collects host identifiers — hostname, platform, arch, home directo...

Malicious code in gpaas-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f698d94fead72f888459a0773a7715dd974433c4624134b743098b61e74f9a9f On npm install, the package's preinstall script runs index.js which collects the installer's hostname, platform, architecture, home directory path, a...

MAL-2026-11055 Malicious code in fundraiserservicepp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356b654b692d4c1222f3dc31dcfad683a6e193a41484d3c617c7c8d52db2313 On npm install, the package's preinstall lifecycle executes index.js which collects os.hostname, os.platform, and os.arch and POSTs them as JSON over...

CVE-2026-15704

creationtimestamp| type| source ---|---|--- 2026-07-24 08:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrewjtdsfk2r 2026-07-24 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116974133641581836 2026-07-24 09:00:34+00:00| seen|...