EUVD-2026-12107

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

About the Remote Code Execution Vulnerability - n8n (CVE-2025-68613)

About Remote Code Execution Vulnerability - n8n CVE-2025-68613. n8n is a workflow automation platform available under a fair-code license. Improper Control of Dynamically-Managed Code Resources CWE-913 in the n8n workflow expression evaluation system allows a remote authenticated attacker without...

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information stealer called MacSync. "Unlike traditional exploit-based attacks, this method relies entirely on user interaction – usually in the form of copying and executing commands –...

Fedora: Security Advisory (FEDORA-2026-2c281f4add)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-4V26-V6CG-G6F9 vulnerabilities

Vulnerabilities for packages: zabbix-fips, zabbix...

Fedora 42 : golang-github-openprinting-ipp-usb (2026-2c281f4add)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2c281f4add advisory. 0.9.31 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

GHSA-WCXR-59V9-RXR8

creationtimestamp| type| source ---|---|--- 2026-03-14 06:40:06+00:00| seen| https://gist.github.com/alon710/04f59b4b34fdad62bcd6aca02cca19bb 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

CVE-2026-32815

creationtimestamp| type| source ---|---|--- 2026-03-14 05:26:51+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xp2m-98x8-rpj6...

GHSA-G353-MGV3-8PCJ

creationtimestamp| type| source ---|---|--- 2026-03-14 04:40:05+00:00| seen| https://gist.github.com/alon710/6d8cc1349cbd20b4b2228bf8920e9f07 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

GHSA-44VG-5WV2-H2HG

creationtimestamp| type| source ---|---|--- 2026-03-14 02:40:05+00:00| seen| https://gist.github.com/alon710/1291af57a3f24c084d79b6036abb3239...

GHSA-GW82-5JC5-87CJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CGHR-H62W-2FC6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-43W8-4Q7X-65HJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GC25-M8G6-JP4F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C8GQ-RHQH-WGWM vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-30464

creationtimestamp| type| source ---|---|--- 2026-03-13 18:23:34+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30464.yaml...

Exploit for Improper Input Validation in Toolkit_Project Toolkit

gha-exploit-guard Standalone GitHub Action that scans GitHub...

GHSA-P9X5-JP3H-96MM

creationtimestamp| type| source ---|---|--- 2026-03-13 01:50:05+00:00| seen| https://gist.github.com/alon710/dd7ce6343fb3c4caed99cdfa0a07695a...

Linux Distros Unpatched Vulnerability : CVE-2026-31900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, usepyproject: true, for...

GO-2026-4671 Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval in github.com/anchore/quill

Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval in github.com/anchore/quill...