31431 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
CVE-2026-54051
creationtimestamp| type| source ---|---|--- 2026-06-02 20:40:48+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-qw6v-5fcf-5666 2026-07-20 17:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3tqdty562a 2026-07-20...
GHSA-29H4-R29X-HCHV vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-Q94G-3GCF-66X7 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-M976-87WM-48FM vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-897W-FCG9-F6XJ vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, kserve...
CVE-2026-52878
creationtimestamp| type| source ---|---|--- 2026-06-02 10:34:12+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr 2026-08-08 00:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrbwd7al2w...
CVE-2026-52880
creationtimestamp| type| source ---|---|--- 2026-06-02 10:32:57+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-w4c6-7r69-w7j9 2026-08-08 00:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdieu5f2m...
CVE-2026-52879
creationtimestamp| type| source ---|---|--- 2026-06-02 10:32:40+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-hf2g-6j7h-98wg 2026-08-08 00:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrc5bbpc2b...
CVE-2026-47249
creationtimestamp| type| source ---|---|--- 2026-06-02 10:30:29+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-w342-mj6g-v9c4 2026-08-08 00:03:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdw2woo2y...
GHSA-HPFW-MQM3-33JH vulnerabilities
Vulnerabilities for packages: uutils...
GO-2026-4960 Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server
Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server...