Malicious code in @hibachi-xyz/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308aa7f8a3746a346bbed305975f68d110bcf6b98815b7bf9f579e37089fd78b The package is published under the name @hibachi-xyz/ui with description 'UI components' but ships no UI code. Its index.js, executed on require,...

Malicious code in cardano-addresses-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d99ae2a620ac8a3db31cde344d6d1e46914f785b3d5f4b8debdb20d64fa9c75 package.json declares a preinstall hook node index.js that runs automatically on npm install. index.js collects host identifiers os.hostname,...

CVE-2026-34282

creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:42+00:00| seen| Telegram/aMi2LuBEIXJnsV5m6CV4ivBB7xOt9ZZP3DifvdMTwaEDzZM 2026-04-23 00:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4pfgyhss2e 2026-04-27 00:57:59+00:00| seen|...

CVE-2026-4686

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:17+00:00| seen|...

📄 WordPress External Post Editor 1.2.3 Scanner

This PHP forensic scanner is designed to assess WordPress sites for the External Post Editor plugin vulnerability in version 1.2.3 that allows unauthenticated file upload potentially leading to remote code execution...

CVE-2020-7017

creationtimestamp| type| source ---|---|--- 2026-02-27 14:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mftva4kls32b...

📄 WordPress Wux Blog Editor 3.0.0 Vulnerability Scanner

This Metasploit auxiliary module scans WordPress sites for the External Post Editor plugin and checks for the unauthenticated file upload vulnerability that exists in version 3.0.0...

CVE-2026-22211

creationtimestamp| type| source ---|---|--- 2026-01-14 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfgguqzej2y...

CVE-2025-11356

creationtimestamp| type| source ---|---|--- 2025-10-07 07:33:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2lmeckcil26 2025-10-07 13:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898...

EUVD-2020-21319

Malware in sbrugna...

CVE-2020-28931

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 21.0.11 allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website...

CVE-2020-28931

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 21.0.11 allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website...

Cross site request forgery (csrf)

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 21.0.11 allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website...