26156 matches found
`tracing-ethers` was removed from crates.io due to malicious code
The tracing-ethers crate attempted to exfiltrate ssh keys to an app hosted on vercel.app The malicious crate had 9 version published on 2026-03-09 approximately 5 days before removal and had no evidence of actual downloads. There were no crates depending on this crate on crates.io. Thanks to the...
GHSA-VMHQ-CQM9-6P7Q
creationtimestamp| type| source ---|---|--- 2026-03-14 11:10:05+00:00| seen| https://gist.github.com/alon710/fec06abe0c60c3d8e76294f40a120083 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...
CVE-2026-32635
creationtimestamp| type| source ---|---|--- 2026-03-14 03:10:06+00:00| seen| https://gist.github.com/alon710/d9b4a060fe174b9be8c2cbbf551e46b6 2026-03-17 10:52:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhasllt7l42i 2026-03-17 19:19:33+00:00| seen|...
GHSA-R48F-3986-4F9C
creationtimestamp| type| source ---|---|--- 2026-03-13 22:10:05+00:00| seen| https://gist.github.com/alon710/bb04f714299eb60050b5b59f56f5af44...
EUVD-2026-11744
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activationkey, subscriptiondate, and importedfrom parameters to manipulate...
GHSA-VH9H-29PQ-R5M8
creationtimestamp| type| source ---|---|--- 2026-03-13 16:40:06+00:00| seen| https://gist.github.com/alon710/358c252196e7720a9583d07702e8374c...
CVE-2026-32313
creationtimestamp| type| source ---|---|--- 2026-03-13 10:49:25+00:00| published-proof-of-concept| https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-4v26-v6cg-g6f9 2026-03-22 03:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmkiyub4v2h...
GHSA-XG2Q-62G2-CVCM
creationtimestamp| type| source ---|---|--- 2026-03-13 10:40:05+00:00| seen| https://gist.github.com/alon710/be322fbd1c6dbc2c5db3537c606b3df9...
GHSA-3Q28-QJRV-QR39
creationtimestamp| type| source ---|---|--- 2026-03-13 10:10:06+00:00| seen| https://gist.github.com/alon710/511ae37ea808f7a384da02de9d2e30d1...
CVE-2026-22193
wpDiscuz plugin (before version 7.6.47) contains an SQL injection in getAllSubscriptions caused by improper quote escaping for parameters email, activation_key, subscription_date, and imported_from. This allows altering queries and potentially exfiltrating sensitive data. CVSS metrics indicate hi...
CVE-2026-22193 wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activationkey, subscriptiondate, and importedfrom parameters to manipulate...
CVE-2026-22193
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activationkey, subscriptiondate, and importedfrom parameters to manipulate...
PT-2026-25139
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activation key, subscription date, and imported from parameters to manipulat...
CVE-2025-40130
creationtimestamp| type| source ---|---|--- 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0288/...
CVE-2025-13726
creationtimestamp| type| source ---|---|--- 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0292/...
openSUSE 15 Security Update : python-maturin (SUSE-SU-2026:0860-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0860-1 advisory. This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stac...
CVE-2026-25076
creationtimestamp| type| source ---|---|--- 2026-03-12 23:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvjr5dfbn2e...
CVE-2026-32100
creationtimestamp| type| source ---|---|--- 2026-03-12 20:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv77yq7nv2d...
CVE-2025-13462
creationtimestamp| type| source ---|---|--- 2026-03-12 19:29:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv53vv5q22k 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/ 2026-03-19 00:00:00+00:00| seen|...
CVE-2026-27280
creationtimestamp| type| source ---|---|--- 2026-03-12 18:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgv2ej5tpd22...