36492 matches found
CVE-2026-54785
creationtimestamp| type| source ---|---|--- 2026-08-01 00:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fo7qlqdy3jspp 2026-08-01 00:31:31+00:00| seen| https://gist.github.com/alon710/dc2fc48bf583407e8cd73eba1edb4959...
PT-2026-67288
Name of the Vulnerable Software and Affected Versions Wazuh workflows versions prior to 44bf114 Description A shell injection issue exists in GitHub Actions where attackers can execute arbitrary commands by submitting pull requests containing crafted VERSION.json files. This occurs because shell...
CVE-2026-67308: Improper Neutralization of Special Elements used in an OS Command
Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...
GHSA-VVP7-H4FJ-M28W
creationtimestamp| type| source ---|---|--- 2026-07-31 23:31:28+00:00| seen| https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f...
GHSA-WQQC-JJCQ-VFXM
creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb...
CVE-2026-62324
creationtimestamp| type| source ---|---|--- 2026-07-31 20:35:20+00:00| published-proof-of-concept| https://github.com/xdan/jodit/security/advisories/GHSA-j839-gqq4-gf9j 2026-08-01 00:15:26+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62324...
GHSA-VJC4-5QP5-M44J vulnerabilities
Vulnerabilities for packages: superset, open-webui...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
GHSA-332R-8PMF-8M9P vulnerabilities
Vulnerabilities for packages: wget...
JLSEC-2026-1090
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...
GHSA-5VJC-7CXW-4W6J
creationtimestamp| type| source ---|---|--- 2026-07-31 19:31:28+00:00| seen| https://gist.github.com/alon710/de1c5b8263f3d3a5d1101a3c2a0269ab...
CVE-2026-68499
creationtimestamp| type| source ---|---|--- 2026-07-31 18:35:14+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836...
CVE-2026-65834
creationtimestamp| type| source ---|---|--- 2026-07-31 18:35:08+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-68cj-mvg9-rgm2...
GHSA-MJ3G-7XCC-X4VH
creationtimestamp| type| source ---|---|--- 2026-07-31 18:32:14+00:00| seen| https://gist.github.com/alon710/3afa9bbe175e1dfd1649cd2081ad6eb5...
GHSA-XRMJ-5G4G-8987
creationtimestamp| type| source ---|---|--- 2026-07-31 16:33:01+00:00| seen| https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46...
Malicious Package
Overview walmart-genai-trace is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview aiprepkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview cognikit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...