Lucene search
+L

815 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 6:31 a.m.•12 views

Malicious code in animatecss-tailwind-graphic (npm)

animatecss-tailwind-graphic 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by jamesvectorpack on 2026-09-28. src/motion.js:5 requires the private scoped...

5.9AI score
SaveExploits0References8Affected Software1
Snyk
Snyk
•added 2026/10/19 9:47 p.m.•4 views

Malicious Package

Overview animatecss-tailwind-graphic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/19 12:00 a.m.•12 views

MAL-2026-18069 Malicious code in animatecss-tailwind-graphic (npm)

animatecss-tailwind-graphic 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by jamesvectorpack on 2026-09-28. src/motion.js:5 requires the private scoped...

6AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•9 views

Skia graphics library DoS

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

10CVSS7.8AI score0.00283EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•21 views

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

5.8CVSS6.6AI score0.00267EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•28 views

Skia Graphic Library Access Information Disclosure

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...

3.1CVSS5.8AI score0.0031EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•6 views

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...

8.3CVSS7.9AI score0.00342EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•6 views

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

8.3CVSS7.9AI score0.00486EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•6 views

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

7.6CVSS7.5AI score0.00527EPSS
SaveExploits0References9Affected Software5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/19 12:00 a.m.•7 views

Malicious code in animatecss-tailwind-graphic (npm)

animatecss-tailwind-graphic 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by jamesvectorpack on 2026-09-28. src/motion.js:5 requires the private scoped...

6AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•11 views

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge involves information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

3.1CVSS5.6AI score0.0023EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•8 views

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

5CVSS6AI score0.00348EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•6 views

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTM...

5.4CVSS6.1AI score0.00232EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•7 views

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

3.1CVSS5.9AI score0.00338EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•13 views

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

5CVSS5.8AI score0.00389EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•4 views

Skia Graphic Library Access Disclosure DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading protected information beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service interruptions...

9.4CVSS7.7AI score0.00384EPSS
SaveExploits0References9Affected Software5
NVD
NVD
•added 2026/10/13 7:18 p.m.•10 views

CVE-2026-69326

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

8.8CVSS0.00768EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:00 p.m.•11 views

EUVD-2026-99899

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00768EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•33 views

CVE-2026-69326

A heap-based buffer overflow vulnerability exists in Graphic Fonts , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availabilit...

8.8CVSS6.6AI score0.00768EPSS
SaveExploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•20 views

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00768EPSS
SaveExploits0
Rows per page
Query Builder