CVE-2026-47006

...

CVE-2026-47000

Oracle Enterprise Manager Base Platform (Security Framework) is affected in version 24.1. The CVE-2026-47000 entry indicates an easily exploitable vulnerability that allows a low-privileged, network-accessing attacker (HTTPS) to compromise the Base Platform. Successful attacks can lead to unautho...

CVE-2026-46986

...

CVE-2026-47408

creationtimestamp| type| source ---|---|--- 2026-07-21 18:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gy5caw624...

CVE-2026-28321

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqgvkrk2e 2026-07-26 16:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkra34xdm2u...

CVE-2026-16411

creationtimestamp| type| source ---|---|--- 2026-07-21 14:25:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5z7yilrg2j 2026-07-21 21:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pbgq2re2k 2026-07-22 04:47:59+00:00| seen|...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

CVE-2026-60034

creationtimestamp| type| source ---|---|--- 2026-07-20 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42va6iol2e 2026-07-20 20:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46cid2y42g...

CVE-2026-51027

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf2lcto2r 2026-07-20 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rgcsfas2f 2026-07-20 17:50:52+00:00| seen|...

CVE-2026-14448

creationtimestamp| type| source ---|---|--- 2026-07-20 13:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3gj5gtx32j 2026-07-20 14:34:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3jam3zj32l 2026-07-21 11:39:39+00:00| seen|...

Malicious code in solana-web3-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38824d7f6044fd3177aba408a5f815879762d8829e56cb6692e2cad652f7d9e6 Package name 'solana-web3-stable' closely resembles the widely-used @solana/web3.js library, raising typosquat concern. The bundled lib/index.cjs.js...

MAL-2026-10900 Malicious code in solana-web3-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912cb41aa6b78cf62207dbf95f7d6247238483a800fa9bc6edd9b9d9f7819364 Package name appears to fork or imitate the well-known @solana/web3.js library. Bundled files lib/index.cjs.js and lib/index.esm.js contain...

MAL-2026-10895 Malicious code in exodus-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...

MAL-2026-10892 Malicious code in claude-code-timer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...

MAL-2026-10873 Malicious code in @dxcl/customer-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...

MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...

CERTFR-2026-ACT-031

creationtimestamp| type| source ---|---|--- 2026-07-20 08:34:42+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mr2v5ko7qq2g 2026-07-20 08:51:10+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mr2w2zlyeq2b 2026-07-20 08:51:16+00:00| seen|...

Malicious Package

Overview @gocortexio/npmgremlinbox-eupl-1-1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...