28464 matches found
`mysten-metrics` was removed from crates.io for malicious code
mysten-metrics included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...
`sui-execution-cut` was removed from crates.io for malicious code
sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...
GHSA-QPRH-M6P3-HWXC `sui-execution-cut` was removed from crates.io for malicious code
sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...
CVE-2026-41922
creationtimestamp| type| source ---|---|--- 2026-05-04 20:29:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j6vdkut2p...
CVE-2026-0703
The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-70069
creationtimestamp| type| source ---|---|--- 2026-05-04 19:08:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2en5bdbq2c...
CVE-2026-42440
creationtimestamp| type| source ---|---|--- 2026-05-04 19:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ebhynmx2p 2026-05-05 20:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4xzgmlc22z...
CVE-2026-42138
creationtimestamp| type| source ---|---|--- 2026-05-04 18:35:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q...
CVE-2026-42092
creationtimestamp| type| source ---|---|--- 2026-05-04 18:31:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cm7hqfa2q...
CVE-2026-24120
creationtimestamp| type| source ---|---|--- 2026-05-04 18:30:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l 2026-05-05 16:40:29+00:00| seen| https://gist.github.com/alon710/f3beac366d11264132c16ea4f9f1b920 2026-05-10 08:07:08+00:00| seen|...
CVE-2026-42091
creationtimestamp| type| source ---|---|--- 2026-05-04 18:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cdogi7q2k...
CVE-2026-42076
creationtimestamp| type| source ---|---|--- 2026-05-04 18:08:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bdddqo62n 2026-09-12 10:00:17+00:00| seen| https://t.me/shimiscyberworld/1184 2026-09-13 00:00:09+00:00| seen| https://t.me/shimiscyberworld/1184...
CVE-2026-41358
creationtimestamp| type| source ---|---|--- 2026-05-04 17:10:29+00:00| seen| https://gist.github.com/alon710/d4f3d9fbcfea6645ceefb383fa46637f...
EUVD-2025-209611
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Support Application allows Reflected XSS. This issue affects Online Support Application: from V3 through 31122025...
CVE-2026-7721
creationtimestamp| type| source ---|---|--- 2026-05-04 06:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3srlohr2e...
CVE-2026-7735
creationtimestamp| type| source ---|---|--- 2026-05-04 06:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3hedhnt2q...
CVE-2026-7717
creationtimestamp| type| source ---|---|--- 2026-05-04 01:17:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyitpy4ep2l 2026-05-04 03:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkyovthfca2r...
PT-2026-37360
sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...
PT-2026-37358
mysten-metrics included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io...