27645 matches found
EUVD-2026-38497
yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's. At the file downloa...
CVE-2026-50574
CVE-2026-50574 affects yt-dlp, where using aria2c as an external downloader for fragmented manifests (HLS/DASH) allows an attacker to write arbitrary files by passing insufficiently sanitized input to aria2c. On Windows, this can cause immediate arbitrary code execution; on non-Windows, execution...
CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
Malicious code in date-format-helper2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1775ce65ad47476ee1a0f1c7c5373e61466ec3eb4543cc658e67d2de22960 Package is advertised as a React date-formatting utility, but its postinstall.js performs targeted credential harvesting on npm install. The script...
CVE-2026-56258
creationtimestamp| type| source ---|---|--- 2026-06-23 14:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlmgqhll2w 2026-06-29 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfcdup5pk2t...
CVE-2026-56222
creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...
CVE-2026-48875
creationtimestamp| type| source ---|---|--- 2026-06-23 10:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mox66eggyl2b...
CVE-2026-8378
creationtimestamp| type| source ---|---|--- 2026-06-23 08:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxko6srr2l...
CVE-2026-9733
Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including the epoch time which is leaked via t...
CVE-2026-9733
creationtimestamp| type| source ---|---|--- 2026-06-23 08:04:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mowwurvmxt2r...
CVE-2026-55655
creationtimestamp| type| source ---|---|--- 2026-06-23 08:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwprsilu2l 2026-06-28 18:41:10+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpemrrslna2p 2026-06-28 18:41:12+00:00| seen|...
EUVD-2026-38421
Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including the epoch time which is leaked via t...
CVE-2026-48502
creationtimestamp| type| source ---|---|--- 2026-06-23 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6ee6ob22q 2026-07-20 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2mvnvtah26...
CVE-2026-54352
creationtimestamp| type| source ---|---|--- 2026-06-23 00:12:27+00:00| seen| https://bsky.app/profile/suriq.io/post/3mow4im4pyb2r 2026-06-26 22:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7y5eswhr2c 2026-06-28 09:06:53+00:00| seen|...
PT-2026-51481
Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including the epoch time which is leaked via t...
CVE-2026-50168
creationtimestamp| type| source ---|---|--- 2026-06-22 23:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow24eiu5p2q...
CVE-2026-44271
creationtimestamp| type| source ---|---|--- 2026-06-22 23:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzkayykd2f 2026-06-23 14:04:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moxkylwnok27 2026-07-23 01:07:06+00:00| seen|...
CVE-2026-42775
creationtimestamp| type| source ---|---|--- 2026-06-22 17:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3movfa6bg6l24...
CVE-2026-6653
creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3movco6cnwk26 2026-07-08 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533bbiim2i 2026-07-10 12:01:08+00:00| seen|...