35879 matches found
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and internal organizations for sale on a cybercrime forum. "While we currently have no evidence of impact to customer...
CVE-2026-47668
creationtimestamp| type| source ---|---|--- 2026-05-20 09:31:29+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc 2026-05-20 13:24:13+00:00| confirmed|...
CVE-2026-47670
creationtimestamp| type| source ---|---|--- 2026-05-20 09:31:12+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-wm5r-5qp3-5vxf 2026-06-15 06:58:24+00:00| confirmed|...
CVE-2026-47669
creationtimestamp| type| source ---|---|--- 2026-05-20 09:30:38+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-h535-j5hr-mv56 2026-07-23 20:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdmxhn4rv2q...
CVE-2026-46372
creationtimestamp| type| source ---|---|--- 2026-05-20 08:35:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46372.yaml 2026-05-29 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmznc7rrtw23...
GHSA-FMXF-PM6P-7XGM vulnerabilities
Vulnerabilities for packages: apache-pulsar, tez, druid...
GHSA-VRQ8-3X54-8JJ3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-V77Q-JQJ8-8VVQ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7W4V-J6PR-V8HV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VRQ8-3X54-8JJ3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J89Q-H74W-5C2Q vulnerabilities
Vulnerabilities for packages: chromium...
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It said the scope of the incident is limited to the Grafana Labs GitHub environment, which includes public and private source code along wi...
Malicious code in cloud-pc-templates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044178c5b07f16ba0681f534724c7bcac3c8f39832484c7a3ac51d43a69cd803 The ai login CLI subcommands loginMode huggingface, ollamacloud, ollamalocal each download a proxy script from a mutable refs/heads/main branch of a...
MAL-2026-4528 Malicious code in cloud-pc-templates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044178c5b07f16ba0681f534724c7bcac3c8f39832484c7a3ac51d43a69cd803 The ai login CLI subcommands loginMode huggingface, ollamacloud, ollamalocal each download a proxy script from a mutable refs/heads/main branch of a...
PT-2026-45131
Impact This affects only workflows that pin an exact affected Composer semver version through setup-php, for example tools: composer:2.9.7. Workflows using the default Composer version, composer:v2, or no pinned Composer version are not affected through setup-php, because those Composer URLs have...
PT-2026-42379
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf...
PT-2026-42366
goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs...
PT-2026-42370
monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...