GHSA-4PV4-4X2X-6J88

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:41+00:00| seen| Telegram/W9cnrPaYEkduQXNMxTamq0Dafu5VRSzGfTVZkSYwQLJrcs...

CVE-2024-29792

creationtimestamp| type| source ---|---|--- 2026-01-06 17:35:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29792.yaml 2026-01-10 21:02:56+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mc3vvnmbj62b...

GHSA-VM5P-43QH-7PMQ

creationtimestamp| type| source ---|---|--- 2026-01-06 17:06:07+00:00| seen| Telegram/NtgdGeZWqROuFZ2INFVIF7wbiZX6L2oMH79jCDcZlZLsnY...

CVE-2025-13652

creationtimestamp| type| source ---|---|--- 2026-01-06 05:03:00+00:00| seen| Telegram/1VAc4wLFDTfmKRJLf2vk5fzkuztcTsljmRPO6kR4McoZxkg 2026-04-10 04:18:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13652.yaml 2026-04-13 21:03:08+00:00|...

GHSA-6JHG-HG63-JVVF

creationtimestamp| type| source ---|---|--- 2026-01-06 01:04:01+00:00| seen| Telegram/2QW8Fh9GNw2oVUTZekwxOkJVN6yFYGFerNd9WhPSIM87KY 2026-01-24 21:31:00+00:00| seen| https://gist.github.com/alon710/8b3299aac7c619edde4755a5c764a295 2026-01-24 21:31:01+00:00| seen|...

SUSE CVE-2025-13352

Mattermost versions 10.11.x = 10.11.6 and Mattermost GitHub plugin versions =2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...

PT-2026-1508

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.20 GitHub Enterprise Server versions 3.14.20 GitHub Enterprise Server versions 3.15.15 GitHub Enterprise Server versions 3.16.11 GitHub Enterprise Server versions 3.17.8 GitHub Enterprise Server...

GHSA-6MQ8-RVHQ-8WGG

creationtimestamp| type| source ---|---|--- 2026-01-05 22:14:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844791950366444 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-06 03:55:16+00:00| seen|...

EUVD-2026-0936

Malicious code in github-badge-bot npm...

Malicious Package

Overview github-badge-bot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2024-30194

creationtimestamp| type| source ---|---|--- 2026-01-03 21:50:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30194.yaml 2026-01-05 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbpdlgj6s522...

golang-cicd-poc

Golang CI/CD POC Project POC project for trying out different...

CVE-2025-61322

creationtimestamp| type| source ---|---|--- 2026-01-03 04:02:20+00:00| seen| https://gist.github.com/Professor-mogli/b1d3e5a44cb225ea8ecf5fd51ec149e1...

GHSA-XR72-2G43-586W

creationtimestamp| type| source ---|---|--- 2026-01-02 21:50:38+00:00| published-proof-of-concept| Telegram/rY7awwgYiyf4MoJmU46p1ZfRs7aDMuxx9VM2nTHHFeQecLc...

[SECURITY] Fedora 43 Update: gh-2.83.2-1.fc43

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

Advanced Vulnerability Scanning for Open Source Software: Detection and Mitigation of Log4j Vulnerabilities

Automated detection of software vulnerabilities remains a critical challenge in software security. Log4j is an industrial-grade Java logging framework listed as one of the top 100 critical open source projects. On Dec. 10, 2021 a severe vulnerability Log4Shell was disclosed before being fully...

Fedora: Security Advisory (FEDORA-2025-f8e5522ee0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-RWC2-F344-Q6W6

creationtimestamp| type| source ---|---|--- 2025-12-31 23:42:18+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mbd25gvgx72y 2026-01-24 22:44:27+00:00| seen| https://gist.github.com/alon710/1b374eaf78dadda1b4eab4b9c4ec88f1...

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud aka Sha1-Hulud supply chain outbreak in November 2025 was likely responsible for the hack of its Google Chrome extension, ultimately resulting in the theft of approximately $8.5 million in assets. "Our Developer GitHub...