18668 matches found
Malicious Package
Overview @m0ntana/app.web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ECHO-676A-E38E-E92A
Bulletin has no description...
CVE-2026-36767
creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewscpgn2w 2026-04-30 19:47:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexlowma2q 2026-04-30 20:43:37+00:00| seen|...
CVE-2026-40595
creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevntsov2r 2026-04-30 21:51:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkqlwhmhop2f...
CVE-2026-40601
creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdh4eymd2q 2026-04-30 19:49:00+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mkqf2pttnz2b...
CVE-2025-14576
creationtimestamp| type| source ---|---|--- 2026-04-30 16:46:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq2tzsw5o2h...
Malicious code in blackbeards-navigator (npm)
Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...
CVE-2026-37567
creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:10+00:00| seen| https://gist.github.com/sgInnora/5aa1682c359a4f4ced53fc2408936e82...
CVE-2026-7489
creationtimestamp| type| source ---|---|--- 2026-04-30 02:20:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html 2026-09-12 10:00:19+00:00| seen| https://t.me/shimiscyberworld/1130 2026-09-13 00:00:08+00:00| seen| https://t.me/shimiscyberworld/1130...
CVE-2026-0204
creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwybg7h2w 2026-04-29 19:18:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mknsuzqutq2t 2026-04-30 06:01:26+00:00| seen|...
EUVD-2026-26259
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. D...
CVE-2026-26204 Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. D...
CVE-2026-26204
Wazuh versions 1.0.0–4.14.3 are affected by a heap-based out-of-bounds write in GetAlertData that writes a NULL byte 1 byte before the start of the buffer allocated by strdup, due to an unsigned underflow. This corrupts heap metadata and can allow a compromised agent to cause denial of service or...
CVE-2026-26204 Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. D...
CVE-2026-26204
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. D...
CVE-2026-6253
creationtimestamp| type| source ---|---|--- 2026-04-29 07:06:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmjxidnro2m 2026-04-29 07:10:54+00:00| seen| https://mastodon.social/users/bagder/statuses/116486743707813679 2026-04-29 07:11:04+00:00| seen|...
CVE-2026-40560
creationtimestamp| type| source ---|---|--- 2026-04-29 00:38:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkluc4fnnn2x 2026-04-29 00:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkluc5hnxw2k...
PT-2026-35961
Name of the Vulnerable Software and Affected Versions Wazuh versions 1.0.0 through 4.14.3 Description A heap-based out-of-bounds WRITE occurs in the GetAlertData function. This is caused by an unsigned integer underflow and pointer arithmetic wrapping, which results in a NULL byte being written...
CVE-2026-23561
creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 01:49:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-citrix-xenserver 2026-04-29 12:45:36+00:00| seen|...