971507 matches found
Node.js: Unix domain socket server bypasses --permission network restrictions (incomplete CVE-2026-21636 fix)
Vulnerability description not provided...
MAL-2026-1933 Malicious code in libavcodec-extra (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 00a68b4208fb4614b815e8a867c2155a8667b424e6457e3b72da362edbad9615 During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user...
Wordfence Intelligence Weekly WordPress Vulnerability Report (March 9, 2026 to March 15, 2026)
Last week, there were 116 vulnerabilities disclosed in 78 WordPress Plugins and 19 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 66 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...
Unauthenticated remote shutdown in nltk.app.wordnet_app
Summary nltk.app.wordnetapp allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple GET /SHUTDOWN%20THE%20SERVER request causes the process to terminate immediately via os.exit0, resulting in a denial of service. Details The...
Malicious code in test-bugbounty-package-6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ee2c6095d9dfd6bdd4945e804a736035b9e29d4265e6a0e455aff026911be7 The package test-bugbounty-package-6 was found to contain malicious code...
Malicious code in test-bugbounty-package-9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...
MAL-2026-1862 Malicious code in test-bugbounty-package-6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ee2c6095d9dfd6bdd4945e804a736035b9e29d4265e6a0e455aff026911be7 The package test-bugbounty-package-6 was found to contain malicious code...
MAL-2026-1863 Malicious code in test-bugbounty-package-9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...
MAL-2026-1695 Malicious code in company-billing-sdk-bugbounty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e0804c0e591fea0c08e9a93b6aaff5803abac7fd387da23dbfb557009397e6 The package company-billing-sdk-bugbounty was found to contain malicious code...
MAL-2026-1542 Malicious code in bugbounty-test-123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22630300fe50578818f50f4a068d400f9e434dc0341fff5a6cd0ca63e82d5e1 The package bugbounty-test-123 was found to contain malicious code. Source: ossf-package-analysis...
redteam-sqli-payloads
redteam-sqli-payloads A ca...
Wa3r-OffSec-Kit
Waer's Cybersecurity Knowledge Base 50+ documents · 2...
CVE-2026-20163
creationtimestamp| type| source ---|---|--- 2026-03-13 10:24:08+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/116221373950139353 2026-03-24 10:34:06+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhsesgybsq2p 2026-03-25 07:00:14+00:00| seen|...
Ruby on Rails: Rails::HTML::Sanitizer.allowed_uri? returns true for entity-encoded control-character-split javascript: URLs
A vulnerability was discovered in the Rails::HTML::Sanitizer.alloweduri? method of the rails-html-sanitizer library. The method incorrectly returned true for entity-encoded control-character-split javascript: URLs, which could lead to potential security issues if the application relied on the...
Wordfence Intelligence Weekly WordPress Vulnerability Report (March 2, 2026 to March 8, 2026)
Last week, there were 199 vulnerabilities disclosed in 84 WordPress Plugins and 107 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 59 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
Uncontrolled Search Path in HunposTagger Allows Untrusted Local Binary Selection in nltk/nltk
Description HunposTagger resolves hunpos-tag using a search list that includes the current working directory ".". This allows attacker-controlled binaries in CWD to be selected. Affected code path: nltk/tag/hunpos.py: hunpospaths = ".", ... self.hunposbin = findbinary"hunpos-tag", ...,...
MAL-2026-1351 Malicious code in faaladorcli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b0c3b79e20d5c0305695699a443c35baf74deda90bad7263cd0b3f9bd3613572 During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user...
Malicious code in falador (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1d66c45b27d4ff7595d8a13a91515450c248dc50a6531199f0254bbd9d6440bb During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user...
MAL-2026-1350 Malicious code in falador (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1d66c45b27d4ff7595d8a13a91515450c248dc50a6531199f0254bbd9d6440bb During installation or import, the package exfiltrates basic information in a dependency confusion attempt. The user identifies themselves as a HackerOne user...