GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: litellm, open-webui, nemo...

GHSA-FWG2-594C-JP42 vulnerabilities

Vulnerabilities for packages: litellm, open-webui, nemo...

Hacked-Machines

HTB Writeups A collection of Hack The Box machines, solve...

GHSA-29G2-3RMR-QM68

creationtimestamp| type| source ---|---|--- 2026-08-08 08:31:57+00:00| seen| https://gist.github.com/alon710/47ff7eb96677e04e1cb388be69ae9049...

GHSA-89VP-JRXV-24W8 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-63220

creationtimestamp| type| source ---|---|--- 2026-08-08 06:36:21+00:00| seen| https://gist.github.com/alon710/8161c68753a945887582acb72752fba7...

CVE-2026-71557

creationtimestamp| type| source ---|---|--- 2026-08-08 03:02:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97106 2026-08-08 10:39:06+00:00| seen| https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014 2026-08-09 00:29:23+00:00| published-proof-of-concept|...

malwoverview v8.1.0

Malwoverview !Alt...

CVE-2026-67422

creationtimestamp| type| source ---|---|--- 2026-08-07 21:05:02+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78 2026-08-1...

GHSA-3F7W-8RR8-F37F vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, awx, mlflow...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the gh auth status process. An attacker can obtain partial authentication token values by accessing terminal or CI output where the process was executed. This is only exploitable if ...

GHSA-P9JM-Q85P-7MCP

creationtimestamp| type| source ---|---|--- 2026-08-07 18:31:18+00:00| seen| https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e...

reverse-engineering-vault

Reverse Engineering Vault Browse the notes directly on GitHub...

Malicious code in @vertexa/prisma-fetch-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af31d3f7a70c62590a05ef03453c16828fa36dd8f3887608cc1f0655bea9b4db Package is published under the @vertexa scope but brands itself as @prisma/fetch-engine: README titled ' @prisma/fetch-engine', author 'Tim Suchanek ...

MAL-2026-13608 Malicious code in @vertexa/prisma-fetch-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af31d3f7a70c62590a05ef03453c16828fa36dd8f3887608cc1f0655bea9b4db Package is published under the @vertexa scope but brands itself as @prisma/fetch-engine: README titled ' @prisma/fetch-engine', author 'Tim Suchanek ...

GHSA-265M-7826-WJQM

creationtimestamp| type| source ---|---|--- 2026-08-07 11:31:42+00:00| seen| https://gist.github.com/alon710/28df1596668f7d78b0163ad585068607...

GHSA-H3H4-J2QV-PV4J vulnerabilities

Vulnerabilities for packages: calico-fips...

GHSA-777R-4CWX-G26V vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-17505

creationtimestamp| type| source ---|---|--- 2026-08-07 06:03:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-17505.yaml 2026-08-08 00:02:14+00:00| confirmed|...

Linux Distros Unpatched Vulnerability : CVE-2026-64653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding,...