GHSA-9GGR-2464-2J32

creationtimestamp| type| source ---|---|--- 2025-09-22 17:43:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115249183875342859...

Information Disclosure

nx is vulnerable to Information Disclosure. The vulnerability is due to malicious package versions containing code that scans the file system and collects credentials, which allows an attacker to exfiltrate sensitive data by posting it to GitHub under the victim’s account...

Malicious Package

Overview cui-travel-component is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

nightmare

This repository is an introduction to binary exploitation and reverse engineering course based on CTF challenges, called "Nightmare". It contains a large amount of content, with over 90 challenges, laid out in a linear fashion, and well-documented write-ups explaining how to go from being handed...

GHSA-67V4-38H7-9JJP vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2025-59420

creationtimestamp| type| source ---|---|--- 2025-09-20 08:10:15+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-9ggr-2464-2j32...

CVE-2021-42359

creationtimestamp| type| source ---|---|--- 2025-09-19 13:04:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42359.yaml 2025-09-20 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lzcbnp6c2227 2026-06-19...

[SECURITY] Fedora 42 Update: gh-2.79.0-1.fc42

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

[SECURITY] Fedora 41 Update: gh-2.79.0-1.fc41

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

CVE-2023-53393

creationtimestamp| type| source ---|---|--- 2025-09-18 15:14:56+00:00| seen| https://gist.github.com/Darkcrai86/3a740039c7a5d1929fff8c17852ad058 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2019-15774

creationtimestamp| type| source ---|---|--- 2025-09-18 11:49:49+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-15774.yaml 2025-09-19 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6srwr52d...

MAL-2025-47450 Malicious code in hello-shai (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...

Malicious code in hello-shai (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...

GHSA-X7HR-W5R2-H6WG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, opensearch-dashboards-fips...

CVE-2025-55912

creationtimestamp| type| source ---|---|--- 2025-09-17 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qay4iex25 2025-09-18 07:08:47+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lz3s55r7pt2j 2025-09-18 18:43:15+00:00| seen|...

GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman...

GO-2025-3938 Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder...

GO-2025-3950 Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

GO-2025-3940 Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis

Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis...

Malicious code in @strong-energetic/test-banned-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security beb2182dad9121d8cdfbd98f321d90cd62cda75f2c4ef68f1a5e22608808dc91 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...