MAL-2026-5892 Malicious code in caspian-day-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895fe8e087ec7af36d61e8a6972f484e70bc1b828374ae83cef9ff4a927f7b55 caspian-day-js impersonates the popular dayjs package: package.json copies author iamkun, homepage day.js.org, and repo github.com/iamkun/dayjs.git,...

CVE-2026-12398

creationtimestamp| type| source ---|---|--- 2026-06-16 16:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mog67nrzov2c...

CVE-2026-12328

creationtimestamp| type| source ---|---|--- 2026-06-16 14:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mog2qgnwtj2x 2026-06-16 17:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogbl2aocw2f 2026-06-17 20:00:00+00:00| seen|...

CVE-2026-9507

creationtimestamp| type| source ---|---|--- 2026-06-16 14:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mog2hi73xp2v...

USN-8434-1 nova vulnerability

It was discovered that Nova did not strip internal nova-prefixed scheduler hints supplied by users on instance creation. An attacker could possibly use this issue to bypass Placement resource claims and scheduling constraint enforcement...

CVE-2026-12330

creationtimestamp| type| source ---|---|--- 2026-06-16 14:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofyvbjse52g 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1924 2026-06-17 20:00:00+00:00| seen|...

CVE-2026-53722

creationtimestamp| type| source ---|---|--- 2026-06-16 14:21:22+00:00| seen| https://gist.github.com/alon710/aedd4394e8d823981bff81789fa6dc8a...

CVE-2026-12327

creationtimestamp| type| source ---|---|--- 2026-06-16 14:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofy4fynhc2h 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-48063

creationtimestamp| type| source ---|---|--- 2026-06-16 14:09:03+00:00| seen| https://gist.github.com/ti-codetec/595cf90f9edd6fcd9e1bb577dea0089b 2026-08-03 21:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7idtofkx2p 2026-08-03 21:56:19+00:00| seen|...

CVE-2026-52711

creationtimestamp| type| source ---|---|--- 2026-06-16 14:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofxjkmt4c2n...

CVE-2026-9320

creationtimestamp| type| source ---|---|--- 2026-06-16 13:55:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofx75zkbe24 2026-06-16 14:05:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofxqzhmmb2p...

BIT-DISCOURSE-2026-45085 Discourse: Chat misauthorization and information disclosure

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, four authorization/disclosure issues in the chat plugin one also involving discourse-calendar: read-only category users could create chat...

CVE-2025-52194

creationtimestamp| type| source ---|---|--- 2026-06-16 12:12:40+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mofrhwpip22x 2026-06-16 12:12:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mofrhyf5ik2x...

CVE-2026-8444

creationtimestamp| type| source ---|---|--- 2026-06-16 09:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofibk2zkh2g 2026-06-16 17:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogbll4sir2c...

CVE-2026-6933 Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation

The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processing user-supplied POST data, combined with the...

CVE-2026-6933

The CVE covers the Premmerce Dev Tools WordPress plugin (versions

CVE-2026-8484

creationtimestamp| type| source ---|---|--- 2026-06-16 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-8484...

SUSE CVE-2026-41568

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitra...

CVE-2026-53831

creationtimestamp| type| source ---|---|--- 2026-06-16 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moepnadglh2s...

CVE-2026-54512

creationtimestamp| type| source ---|---|--- 2026-06-16 01:10:42+00:00| published-proof-of-concept| https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm 2026-06-24 00:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymp44sqy23 2026-07-12...