32018 matches found
CVE-2026-43616
creationtimestamp| type| source ---|---|--- 2026-05-04 18:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dn4fq4j2p...
CVE-2026-42092
creationtimestamp| type| source ---|---|--- 2026-05-04 18:31:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cm7hqfa2q...
CVE-2026-41571
creationtimestamp| type| source ---|---|--- 2026-05-04 18:24:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c6ljvvg2r 2026-05-04 20:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j2fwzwb2e 2026-09-12 10:00:17+00:00| seen|...
CVE-2026-41571
Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt"null" placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password:...
CVE-2026-42090 Notesnook: RCE via stored XSS in note export rendering
Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution in the desktop app. The root cause is...
CVE-2026-5654
A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause the application to crash by exploiting an issue within the AMR-NB codec. Successful exploitation leads to a denial of service, which prevents Wireshark from functioning and analyzing network traffic. Mitigation To...
CVE-2026-41044
A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the admin web console to craft a malicious broker name. This malicious name, containing an xbean binding, can be used by a virtual machine VM transport to load a remote Spring...
CVE-2026-7735
creationtimestamp| type| source ---|---|--- 2026-05-04 06:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3hedhnt2q...
Malicious Package
Overview @alfa.life.mapp/app.web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious code in @w3m-app/get_chain_id (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a5497ea6ed8479f242764e1c85fb02158843dd5dec341d2054ea7ef49adb4d The package @w3m-app/getchainid was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview @w3m-app/getchainid is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-3273 Malicious code in @w3m-app/is_connected (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793804fbeaedf1325065aa857a03e0aba4bacd06b686728efeeb4a406f2e2668 The package @w3m-app/isconnected was found to contain malicious code. Source: ghsa-malware...
Nginx UI 代码注入漏洞
Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI prior to 2.3.8 had a code injection vulnerability. This vulnerability stemmed from the backup restoration endpoint POST /api/restore, which operates without authentication within the first 10 minutes after the process...
CVE-2026-7671 CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication
A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. Attacks of...
CVE-2026-7671 CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication
A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. Attacks of...
EUVD-2026-26804
A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. Attacks of...
clan-nxt-toolkit
🔴 CLAN NXT Toolkit ██████╗██╗ █████╗ ███╗ ██╗...
CVE-2026-7644 ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be...
