62177 matches found
CVE-2026-9193
creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu72j3b23 2026-08-06 16:15:53+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781 2026-09-05 03:16:47+00:00| seen|...
CVE-2026-9190
creationtimestamp| type| source ---|---|--- 2026-08-05 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzqmqsvx2l 2026-08-06 16:15:49+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-12410
creationtimestamp| type| source ---|---|--- 2026-08-05 16:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdypuyg4422...
CVE-2026-10716
Directus: Authenticated SQL injection in collection creation when using PostgreSQL with PostGIS. A admin can craft a collection with a geometry field where fields[].type starts with geometry but includes attacker-controlled SQL syntax after the geometry subtype, enabling time-based SQL injection....
CVE-2026-10716
Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a collection with a geometry field whose fields.type value starts with geometry but contains attacker-controlled SQL...
CVE-2026-10716 Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a collection with a geometry field whose fields.type value starts with geometry but contains attacker-controlled SQL...
EUVD-2026-53519
Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a collection with a geometry field whose fields.type value starts with geometry but contains attacker-controlled SQL...
CVE-2026-10716 Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a collection with a geometry field whose fields.type value starts with geometry but contains attacker-controlled SQL...
CVE-2026-10716 Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a collection with a geometry field whose fields.type value starts with geometry but contains attacker-controlled SQL...
CVE-2026-70604
creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...
GHSA-7PGQ-CR25-XVC8
creationtimestamp| type| source ---|---|--- 2026-08-05 16:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364 2026-08-06 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364...
MAL-2026-13144 Malicious code in dolyame-ui-checkbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a445ffd0f222f7d58ad870ad641f9dd2fb21a1cc43795cbef5c58109cafebbe On require of the package, index.js loads vendor.js, which reconstructs a set of C2 hostnames from string-split fragments four .workers.dev mirrors a...
CVE-2026-71278
creationtimestamp| type| source ---|---|--- 2026-08-05 15:02:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdsay4d2z2h...
CVE-2026-16496
creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717 2026-08-29 20:00:06+00:00| seen| https://t.me/CyberDispatch/2484 2026-08-30 00:00:37+00:00| seen|...
CVE-2026-71268
creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22...
MAL-2026-13060 Malicious code in boxy-maker-legacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa86d66c8cd9a63a566e94925453ec6b5d144da1adff066c7cf861ae0a02be5b On require of the package, runtime.js runs a bootstrap routine that downloads a platform-specific binary from obfuscated Cloudflare Workers subdomain...
MAL-2026-12609 Malicious code in claims-block-visibility (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6afd966a220b14c0d01a2132af36d206eee200ab806d61443b66379e560b324 On require'claims-block-visibility', index.js loads polyfill.js which unconditionally runs a setup routine that selects an OS-specific endpoint,...
Malicious code in delivery-ci-sage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b54c7175e494e683cdbc63814267aa5544f88d0373b929b9f0fe3fcb8202bd3 On require of the package, index.js loads loader.js which selects a platform-specific asset path and fetches a binary from one of four...
MAL-2026-12705 Malicious code in devplatform-confirm-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68424c7a93599d9d6d9391e3236d1ebf1d88fdc590b9c20f1ee615295335e5e8 [email protected] is advertised as a 'confirm input adapter' but on require executes ext.js, which fetches a platform-specific binary...