CVE-2026-2728

creationtimestamp| type| source ---|---|--- 2026-04-13 15:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf5kiy4pl2m 2026-05-12 00:21:23+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-5gm9-622f-qcg5 2026-05-18 17:10:50+00:00|...

CVE-2026-36923

creationtimestamp| type| source ---|---|--- 2026-04-13 15:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4ztv33x2a...

CVE-2025-66849

creationtimestamp| type| source ---|---|--- 2026-04-13 15:00:18+00:00| published-proof-of-concept| Telegram/dj4imeQmrYQwcQ02maJeiX9ofB3TXoiNOC04yDTJaU4PN0A...

CVE-2026-3830

creationtimestamp| type| source ---|---|--- 2026-04-13 14:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjf3j5oqc62u...

`pretty-changelog-logger` was removed from crates.io for malicious code

pretty-changelog-logger contains a build script build.rs that acts as a loader/dropper for malicious payloads. The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecti...

RUSTSEC-2026-0100 `pretty-changelog-logger` was removed from crates.io for malicious code

pretty-changelog-logger contains a build script build.rs that acts as a loader/dropper for malicious payloads. The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecti...

RUSTSEC-2026-0101 `safe-agent-rs` was removed from crates.io for being affiliated with malicious code

While safe-agent-rs did not directly contain malicious code, it was owned by the same user as pretty-changelog-logger and microsoftsystem64. safe-agent-rs also appeared to be imitating a different websocket library. We decided to remove it out of an abundance of caution. This crate had 2 versions...

CVE-2021-32784

creationtimestamp| type| source ---|---|--- 2026-04-13 09:33:18+00:00| seen| https://gist.github.com/b0b0haha/3e0a988ffbf4047ad48b70a406cf6492...

CVE-2026-6164

creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:08+00:00| seen| Telegram/IHOzCDm6ocMXwhKClYe85fycTrPO6GtT3pOiprPCJXwKD8...

CVE-2026-6163

creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE 2026-04-13 07:18:08+00:00| seen| Telegram/IHOzCDm6ocMXwhKClYe85fycTrPO6GtT3pOiprPCJXwKD8...

CVE-2026-6136

creationtimestamp| type| source ---|---|--- 2026-04-13 01:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdo435jy72t 2026-04-13 01:17:42+00:00| published-proof-of-concept| Telegram/nag6kHTmr7R2m3RBAp9Z6zI9Kn5ruvnm4vlyMwU2lthiM 2026-05-28 08:07:08+00:00| seen|...

Eaton End-of-Life Devices Detection

The current plugin identifies Eaton devices that are end-of-life, i.e., still supported but have a discontinued date announced. Eaton Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last ti...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-1568)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1568 advisory. A flaw in the gix-date library can generate invalid non-UTF8 strings, leading to undefined behavior when processed. The most likely impact from a successful attack is to data integrity, by the...

Medium: rust

Issue Overview: A flaw in the gix-date library can generate invalid non-UTF8 strings, leading to undefined behavior when processed. The most likely impact from a successful attack is to data integrity, by the malicious data being able to corrupt data being hold in memory and to system availabilit...

PT-2026-32266

Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information...

CVE-2026-6130

creationtimestamp| type| source ---|---|--- 2026-04-12 23:15:15+00:00| published-proof-of-concept| Telegram/hilS-ssmivi8q1jRkIVKk8g--dsfivFEr3ZeZAGEjyA5lds 2026-04-13 02:02:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjdrjtah7c2r...

CVE-2026-6110

creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:18:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjblzcg4gt2r 2026-04-12 06:45:10+00:00| seen|...

CVE-2026-6113

creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:43:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnfnl6w62s 2026-04-12 06:15:45+00:00| seen|...

CVE-2018-25248

creationtimestamp| type| source ---|---|--- 2026-04-11 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj6xkzjqmn2e...

GHSA-4GR2-CR97-Q9FX

creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w...