18730 matches found
CGA-V7M7-2C4G-5VFX
Bulletin has no description...
PYSEC-2026-1 A single post-release of dydx-v4-client contained obfuscated multi-stage loader
A PyPI user account compromised by an attacker and was able to upload a malicious version 1.1.5.post1 of the dydx-v4-client package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible...
CVE-2025-68871
creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...
Malicious Package
Overview @sportdigi/bootstrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
From Triage to Threat Hunts: How AI Accelerates SecOps
If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total autonomy. Vendors seized on the idea of the "Autonomous SOC" and suggested a future where algorithms replaced analysts. That future has not arrived. We have not seen mass layoff...
CVE-2025-7740
creationtimestamp| type| source ---|---|--- 2026-01-28 10:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2etilnc2c 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09...
CVE-2025-68857
creationtimestamp| type| source ---|---|--- 2026-01-27 23:28:55+00:00| seen| Telegram/YNtd9hp8-fgDeBa8loSpBRJii6nAPxhmRO29fflkF0ZSQkw...
UBUNTU-CVE-2026-22264
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...
CVE-2026-22264
CVE-2026-22264 affects Suricata (network IDS/IPS/NSM engine). The issue is caused by an unsigned integer overflow that can trigger a heap use-after-free during generation of excessive alerts for a single packet. Affected releases are prior to versions 8.0.3 and 7.0.14 ; those versions contain the...
CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...
CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...
CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...
CVE-2026-22261 Suricata eve/alert: http1 xff handling can lead to denial of service
Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve...
Lab-Reflected-XSS-into-attribute-with-angle-brackets-HTML-encoded
Reflected XSS - Attribute Injection A simple demonstration of...
Malicious Package
Overview @santandergroup-uk/edgehome-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview @riag-libs/pattern-library-react-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails
Scammers are abusing Microsoft Teams invitations to send fake billing notices, with 12,866 emails reaching around 6,135 users in a phone-based phishing campaign...
SUSE: Security Advisory (SUSE-SU-2026:0265-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-HQF9-8XV5-X8XW
creationtimestamp| type| source ---|---|--- 2026-01-24 21:31:08+00:00| seen| https://gist.github.com/alon710/97491250cd95bc835ebfe51fcfbf1308 2026-01-24 21:31:09+00:00| seen| https://gist.github.com/alon710/6ece0e6f8b35b33d759e8493148369c9 2026-01-24 22:43:01+00:00| seen|...