CVE-2026-25047

creationtimestamp| type| source ---|---|--- 2026-01-29 10:32:43+00:00| published-proof-of-concept| https://github.com/sharpred/deepHas/security/advisories/GHSA-2733-6c58-pf27 2026-01-29 23:33:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlx6pldxr2n 2026-04-30 07:21:10+00:00|...

CVE-2025-55704

creationtimestamp| type| source ---|---|--- 2026-01-29 05:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjzzzmkqe2c...

CVE-2026-1551

creationtimestamp| type| source ---|---|--- 2026-01-29 03:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjtnztphc2h...

ROS-20260129-73-0048

Vulnerability in nextcloud-app-calendar related to improper handling of an unexpected data type. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-5360

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.26.4 Description Budibase is a low code platform used for building internal tools, workflows, and admin panels. A Creator-level user, normally lacking UI permissions to invite users, can manipulate API requests to...

CVE-2026-1479

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameters 'Idusuario' and 'Idevaluacion’ in ‘/evaluacionhcaverauto.asp', could allow an attacker...

CVE-2026-1482

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idevaluacion' in '/evaluacionobjetivosevaluadefinido.aspx', could allow an attacker to...

CVE-2026-1480

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' in '/evaluacionobjetivosanyosigevalua.aspx', could allow an attacker to...

CVE-2026-1476

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' in ‘/evaluacionaccionesverauto.aspx’, could allow an attacker to extract...

CVE-2023-37525

CVE-2023-37525 affects HCL BigFix Compliance. The connected sources describe a sensitive information disclosure that lets a remote attacker access files under the WEB-INF directory, potentially exposing Java class files and configuration information and leading to unauthorized access to applicati...

CVE-2020-36969

creationtimestamp| type| source ---|---|--- 2026-01-28 18:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdivamalba2t...

Exploit for Out-of-bounds Read in Openssl

CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...

Malicious Package

Overview emergency-pull-request-probot-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview app-webbridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview aem-guides-wknd-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23864. A specially crafted HTTP...

GHSA-H25M-26QC-WCJF Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23864. A specially crafted HTTP...

CVE-2026-23592

creationtimestamp| type| source ---|---|--- 2026-01-28 15:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdilysiwez2q...

CVE-2020-36990

creationtimestamp| type| source ---|---|--- 2026-01-28 14:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdij5ksm2r2t...

Malicious code in acuitymobileapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...