CVE-2026-43964

creationtimestamp| type| source ---|---|--- 2026-05-04 22:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qlyqxfh2k 2026-06-07 07:14:40+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mnommkdye732...

`mysten-metrics` was removed from crates.io for malicious code

mysten-metrics included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...

`sui-execution-cut` was removed from crates.io for malicious code

sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...

GHSA-QPRH-M6P3-HWXC `sui-execution-cut` was removed from crates.io for malicious code

sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...

CVE-2026-41922

creationtimestamp| type| source ---|---|--- 2026-05-04 20:29:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j6vdkut2p...

CVE-2026-0703

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2025-70069

creationtimestamp| type| source ---|---|--- 2026-05-04 19:08:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2en5bdbq2c...

CVE-2026-42440

creationtimestamp| type| source ---|---|--- 2026-05-04 19:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ebhynmx2p 2026-05-05 20:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4xzgmlc22z...

CVE-2026-42138

creationtimestamp| type| source ---|---|--- 2026-05-04 18:35:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q...

CVE-2026-42092

creationtimestamp| type| source ---|---|--- 2026-05-04 18:31:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cm7hqfa2q...

CVE-2026-24120

creationtimestamp| type| source ---|---|--- 2026-05-04 18:30:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l 2026-05-05 16:40:29+00:00| seen| https://gist.github.com/alon710/f3beac366d11264132c16ea4f9f1b920 2026-05-10 08:07:08+00:00| seen|...

CVE-2026-42091

creationtimestamp| type| source ---|---|--- 2026-05-04 18:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cdogi7q2k...

CVE-2026-42076

creationtimestamp| type| source ---|---|--- 2026-05-04 18:08:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bdddqo62n...

CVE-2026-41358

creationtimestamp| type| source ---|---|--- 2026-05-04 17:10:29+00:00| seen| https://gist.github.com/alon710/d4f3d9fbcfea6645ceefb383fa46637f...

EUVD-2025-209611

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Support Application allows Reflected XSS. This issue affects Online Support Application: from V3 through 31122025...

CVE-2026-7721

creationtimestamp| type| source ---|---|--- 2026-05-04 06:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3srlohr2e...

CVE-2026-7735

creationtimestamp| type| source ---|---|--- 2026-05-04 06:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3hedhnt2q...

CVE-2026-7717

creationtimestamp| type| source ---|---|--- 2026-05-04 01:17:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyitpy4ep2l 2026-05-04 03:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkyovthfca2r...

PT-2026-37360

sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...

PT-2026-37358

mysten-metrics included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...