CVE-2026-50100

creationtimestamp| type| source ---|---|--- 2026-06-14 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN55319858 2026-06-15 12:17:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modbbbc5qg2e 2026-06-15 20:01:07+00:00| seen|...

CVE-2026-47135

creationtimestamp| type| source ---|---|--- 2026-06-14 08:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moach3z7ag2d...

CVE-2011-0447

creationtimestamp| type| source ---|---|--- 2026-06-14 04:23:47+00:00| seen| https://gist.github.com/riskiidice/ac2f41e06c7793e21f01794f469e3797...

GHSA-48C2-RRV3-QJMP

creationtimestamp| type| source ---|---|--- 2026-06-13 19:28:58+00:00| seen| https://gist.github.com/konard/8c3e52dfd7019783fb2c7f9392d36d2c...

GHSA-G7R4-M6W7-QQQR

creationtimestamp| type| source ---|---|--- 2026-06-13 17:18:42+00:00| seen| https://gist.github.com/konard/1a769ec3dc69d16ca04094fc51ca92c0 2026-06-15 13:41:17+00:00| seen| https://gist.github.com/alon710/174a230087452badddd6537b27864239 2026-07-05 13:35:44+00:00| seen|...

CVE-2026-48558

creationtimestamp| type| source ---|---|--- 2026-06-13 15:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo6jgxce6n2p 2026-06-14 17:33:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobcidnjl72t 2026-06-15 16:30:48+00:00| seen|...

CVE-2026-50878

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:46+00:00| seen| https://gist.github.com/pyuysig/d4c2ace69162c82f1df197ce0f45d63f...

CVE-2026-50869

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:34+00:00| seen| https://gist.github.com/pyuysig/95931ed2140f3bd85dc67057dd23a47f...

CVE-2026-48785

creationtimestamp| type| source ---|---|--- 2026-06-13 11:39:48+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo665pux3s2w...

Malicious code in sheratan_haha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b473b40e0c041d34e85161ed8c91e0e00d006a0822698a0d3994876cb685ddd On npm install, the package's declared postinstall hook node postinstall.js runs whoami on the installer's machine and POSTs the output to a hardcode...

MAL-2026-5739 Malicious code in sheratan_haha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b473b40e0c041d34e85161ed8c91e0e00d006a0822698a0d3994876cb685ddd On npm install, the package's declared postinstall hook node postinstall.js runs whoami on the installer's machine and POSTs the output to a hardcode...

MAL-2026-5731 Malicious code in houzidawang807 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7568d90e7a8d940b5618fa36bccfc2b7fa02ceaa814f0a416d2cc989c685e489 Package advertises itself as 'a simple date formatting utility' but ships an SSH-key-stealing C2 client. postinstall.js enumerates /.ssh for .pub...

MAL-2026-5732 Malicious code in houzidawang808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d6b96fe99e7f8503cb07df05d6b621dc8e8243fc7288844678d8aff043a654 The package presents itself as a 'simple date formatting utility' index.js exports a trivial formatDate wrapper around toLocaleDateString, but ships ...

CVE-2026-54229

creationtimestamp| type| source ---|---|--- 2026-06-13 05:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo5kc74kqz22 2026-06-13 06:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo5oi7fhpd2b...

MAL-2026-5729 Malicious code in houzidawang806 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbf603db6d0a3434c6c417dd460f26d08b9e230c03926f05987bb3841d3c72b Package self-describes as 'A simple date formatting utility' but ships two distinct attacker primitives. 1 postinstall.js enumerates /.ssh/ for .pub...

CVE-2026-53823

creationtimestamp| type| source ---|---|--- 2026-06-13 01:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55eypeht2v 2026-06-16 06:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mof52ftlwl2o...

CVE-2026-53829

creationtimestamp| type| source ---|---|--- 2026-06-13 01:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo5542bayd2j 2026-06-16 07:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mofafocrem27...

CVE-2026-42851

creationtimestamp| type| source ---|---|--- 2026-06-12 22:20:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo4rkr3aqf2m 2026-06-13 10:04:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5yph3aqi2y...

CVE-2026-53834 OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands

OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allows authenticated senders to skip allowFrom policy checks. Attackers can invoke slash commands before configured access control policies are applied, potentially triggering comman...

CVE-2026-24136

creationtimestamp| type| source ---|---|--- 2026-06-12 21:00:04+00:00| published-proof-of-concept| Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY...