Lucene search
+L

18730 matches found

OSV
OSV
added 2026/01/29 12:49 a.m.7 views

CGA-V7M7-2C4G-5VFX

Bulletin has no description...

7.3CVSS5.8AI score0.00517EPSS
SaveExploits0
OSV
OSV
added 2026/01/28 9:09 p.m.103 views

PYSEC-2026-1 A single post-release of dydx-v4-client contained obfuscated multi-stage loader

A PyPI user account compromised by an attacker and was able to upload a malicious version 1.1.5.post1 of the dydx-v4-client package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible...

5.8AI score
SaveExploits0References1
Circl
Circl
added 2026/01/28 5:20 p.m.12 views

CVE-2025-68871

creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...

7.1CVSS4.8AI score0.00272EPSS
SaveExploits0
Snyk
Snyk
added 2026/01/28 4:33 p.m.11 views

Malicious Package

Overview @sportdigi/bootstrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.9AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2026/01/28 11:55 a.m.13 views

From Triage to Threat Hunts: How AI Accelerates SecOps

If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total autonomy. Vendors seized on the idea of the "Autonomous SOC" and suggested a future where algorithms replaced analysts. That future has not arrived. We have not seen mass layoff...

6AI score
SaveExploits0
Circl
Circl
added 2026/01/28 10:20 a.m.11 views

CVE-2025-7740

creationtimestamp| type| source ---|---|--- 2026-01-28 10:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2etilnc2c 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09...

8.8CVSS5.1AI score0.00172EPSS
SaveExploits0References2
Circl
Circl
added 2026/01/27 11:28 p.m.13 views

CVE-2025-68857

creationtimestamp| type| source ---|---|--- 2026-01-27 23:28:55+00:00| seen| Telegram/YNtd9hp8-fgDeBa8loSpBRJii6nAPxhmRO29fflkF0ZSQkw...

9.3CVSS4.8AI score0.00329EPSS
SaveExploits0
OSV
OSV
added 2026/01/27 7:16 p.m.12 views

UBUNTU-CVE-2026-22264

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

9.1CVSS5.9AI score0.00365EPSS
SaveExploits0References7
CVE
CVE
added 2026/01/27 6:33 p.m.120 views

CVE-2026-22264

CVE-2026-22264 affects Suricata (network IDS/IPS/NSM engine). The issue is caused by an unsigned integer overflow that can trigger a heap use-after-free during generation of excessive alerts for a single packet. Affected releases are prior to versions 8.0.3 and 7.0.14 ; those versions contain the...

9.1CVSS6AI score0.00365EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/01/27 6:33 p.m.62 views

CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

7.4CVSS0.00365EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/01/27 6:33 p.m.9 views

CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

7.4CVSS6AI score0.00365EPSS
SaveExploits0References5
OSV
OSV
added 2026/01/27 6:33 p.m.17 views

CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

7.4CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/01/27 6:10 p.m.5 views

CVE-2026-22261 Suricata eve/alert: http1 xff handling can lead to denial of service

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve...

3.7CVSS5.9AI score0.00331EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/01/27 4:29 p.m.204 views

Lab-Reflected-XSS-into-attribute-with-angle-brackets-HTML-encoded

Reflected XSS - Attribute Injection A simple demonstration of...

6AI score
SaveExploits0
Snyk
Snyk
added 2026/01/27 8:16 a.m.3 views

Malicious Package

Overview @santandergroup-uk/edgehome-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/27 8:16 a.m.13 views

Malicious Package

Overview @riag-libs/pattern-library-react-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

9.8CVSS5.9AI score
SaveExploits0References2
HackRead
HackRead
added 2026/01/26 6:14 p.m.16 views

Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails

Scammers are abusing Microsoft Teams invitations to send fake billing notices, with 12,866 emails reaching around 6,135 users in a phone-based phishing campaign...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2026/01/26 12:00 a.m.7 views

SUSE: Security Advisory (SUSE-SU-2026:0265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS5.9AI score0.00619EPSS
SaveExploits0References4
Circl
Circl
added 2026/01/24 9:31 p.m.11 views

GHSA-HQF9-8XV5-X8XW

creationtimestamp| type| source ---|---|--- 2026-01-24 21:31:08+00:00| seen| https://gist.github.com/alon710/97491250cd95bc835ebfe51fcfbf1308 2026-01-24 21:31:09+00:00| seen| https://gist.github.com/alon710/6ece0e6f8b35b33d759e8493148369c9 2026-01-24 22:43:01+00:00| seen|...

5AI score
SaveExploits0References3
Circl
Circl
added 2026/01/24 9:25 p.m.14 views

GHSA-G5GC-H5HP-555F

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:13+00:00| seen| https://gist.github.com/alon710/36dfb2017bc84d12c53f0d34b22f1f3f...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder