27880 matches found
CVE-2025-15673
creationtimestamp| type| source ---|---|--- 2026-08-03 23:34:48+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3ms7nxyas4w2m...
GHSA-CQ5V-8Q36-5273
creationtimestamp| type| source ---|---|--- 2026-08-03 21:32:44+00:00| seen| https://gist.github.com/alon710/cb22e8e296a36049522556dbfd0c36bc...
GHSA-HF85-99VJ-M4C5
creationtimestamp| type| source ---|---|--- 2026-08-03 20:55:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f2blmgt2q...
GHSA-MWP4-54F8-5FHR
creationtimestamp| type| source ---|---|--- 2026-08-03 20:31:35+00:00| seen| https://gist.github.com/alon710/572dbe4f17925376407c061da3100fba...
GHSA-V8FG-2RW7-Q452 Sequelize: SQL Injection (Oracle DB)
Summary SQL Injection is possible with strings only if dialect is set to oracle. The vulnerability was confirmed on Sequelize v6.37.3. Details The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. javascript else if dialect === 'oracle...
Sequelize: SQL Injection (Oracle DB)
Summary SQL Injection is possible with strings only if dialect is set to oracle. The vulnerability was confirmed on Sequelize v6.37.3. Details The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. javascript else if dialect === 'oracle...
EUVD-2026-52408
go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...
CVE-2026-68945
creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151 2026-08-03 18:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76ddsj6kowu3a...
MAL-2026-11502 Malicious code in simple-date-formatter-new-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628527c388185356d23a8905edf240a32c062afb06c00a58c0101ffd4bcc5182 On npm install, the package.json postinstall hook executes a shell one-liner that attempts to mount the host block device via mknod, enumerates...
Malicious code in beaver-ui-date-range-picker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744905f86e776fde6075a23e40274b0d4798bbb835114506926e0799430c24ba [email protected] declares a postinstall hook node setup.js and additionally triggers the same script from index.js via try...
MAL-2026-11506 Malicious code in beaver-ui-date-range-picker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744905f86e776fde6075a23e40274b0d4798bbb835114506926e0799430c24ba [email protected] declares a postinstall hook node setup.js and additionally triggers the same script from index.js via try...
CVE-2026-20464
creationtimestamp| type| source ---|---|--- 2026-08-03 15:33:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032302879027594...
CVE-2026-68587
creationtimestamp| type| source ---|---|--- 2026-08-03 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6r3yur7p2b 2026-09-03 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-69mh-gvh4-8gp7 2026-09-04 15:31:59+00:00| seen|...
CVE-2026-67608
creationtimestamp| type| source ---|---|--- 2026-08-03 14:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y...
Malicious code in simple-date-formatter-util-5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6c0d10eabca0cef05a136e2ffd68781a965747ad1e75bf9fd9528292bbe429 The package is advertised as a date-formatting utility but its package.json postinstall script curls cloud-provider instance metadata endpoints AWS...
MAL-2026-11501 Malicious code in simple-date-formatter-util-5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6c0d10eabca0cef05a136e2ffd68781a965747ad1e75bf9fd9528292bbe429 The package is advertised as a date-formatting utility but its package.json postinstall script curls cloud-provider instance metadata endpoints AWS...
Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in parsedate when processing specially crafted date strings bsc1271705. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
SUSE-SU-2026:3454-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in parsedate when processing specially crafted date strings bsc1271705...