AVTECH Room Alert Cleartext Storage of Sensitive Information (CVE-2024-33470)

When an administrator authenticates with the device and browses the settings pages, the SMTP password is loaded from the device and presented in the DOM in plaintext. When settings are saved, the SMTP credentials are sent back to the device in plain text. This allows an actor with administrative...

AVTECH Room Alert 3E Exposure of Resource to Wrong Sphere (CVE-2019-13379)

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in. This plugin only works...

CVE-2026-35496

creationtimestamp| type| source ---|---|--- 2026-04-16 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN78422311 2026-04-17 06:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjob6d5mmj2f...

GHSA-72C6-FX6Q-FR5W

creationtimestamp| type| source ---|---|--- 2026-04-16 15:20:04+00:00| seen| Telegram/YbTUbIPLh0mBIC2v2cs-sH-0kBWzIOZ-tc0xqHP7s3YdmQ...

MAL-2026-2789 Malicious code in otomi-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801ad983065c3d079ec114f2e5c5fc207a1903c098b383a2b049060d4d64f654 The package otomi-tasks was found to contain malicious code...

CVE-2024-2374

creationtimestamp| type| source ---|---|--- 2026-04-16 10:08:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjm644xfd72t...

MAL-2026-2771 Malicious code in icims-express-dot-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc7ed2f685a8199818c3090faeaf9536fa49cced26ffde16ff9061c729e3143 The package icims-express-dot-engine was found to contain malicious code...

MAL-2026-2743 Malicious code in chai-use-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69d3debb629659a8d363e7f538314293640ed2e1625ef9ff51f9e9999ad2593 The package chai-use-chain was found to contain malicious code. Source: ghsa-malware 47423a7175b64aa5c431093d8c904461cce80e3c62c6d1895f3d96a2a43974db...

MAL-2026-2741 Malicious code in chai-chain-coremesh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0998d78c57b51efc4ff5789a97e24374a9f1a3ea3d50422802d4f0b189473877 The package chai-chain-coremesh was found to contain malicious code...

MAL-2026-2713 Malicious code in @fuego-tools/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b13e975286ea5f50f12e176e5b9399e209b890fc03e8d5f890f02d83a52489 The package @fuego-tools/analytics was found to contain malicious code...

Malicious code in @appleseed-apple/ac-sass-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c442c9bf5d1d38099a4ea05b85daf5b071a2d9e6e87dc72d030ecd4ca5404 The package @appleseed-apple/ac-sass-kit was found to contain malicious code...

Malicious code in @3stripes/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3a9f22040b78bb5d4973940dff6f5acad0f3a338e26c8f025ca96245acacc9 The package @3stripes/core was found to contain malicious code...

CVE-2026-25219

creationtimestamp| type| source ---|---|--- 2026-04-15 15:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjk7qcmrjv2g 2026-04-15 15:50:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjkaqjucrm2t...

tp-xss

TP - Exploitation d'une Faille XSS Enonce du professeur...

CVE-2026-27292

creationtimestamp| type| source ---|---|--- 2026-04-15 01:19:06+00:00| seen| Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs 2026-04-15 11:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjtu5mxyn2k 2026-04-16 00:07:07+00:00| seen|...

CVE-2026-27288

creationtimestamp| type| source ---|---|--- 2026-04-15 00:18:27+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjimntrqsi2i...

PT-2026-33010

🔒 CyberSecurity CVE-2024-44738 & CVE-2024-44337: n8n Workflow Automation Critical Flaws — Detec… "Security Arsenal’s analysis of the recent Pillar Security disclosure regarding n8n…" 🔗 https://t.co/U8qg6uYpWr CyberSecurity ThreatIntel alertfatigue triage alertmonitor...

CVE-2026-22828

creationtimestamp| type| source ---|---|--- 2026-04-14 16:51:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtoef7zj2m 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 17:28:30+00:00| seen|...

CVE-2025-65135

creationtimestamp| type| source ---|---|--- 2026-04-14 16:43:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhtagncml2g 2026-04-14 16:51:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtosxxmr2s...

Malicious Package

Overview pinstatsd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...