19901 matches found
GHSA-5GF7-WJFM-VMVM
creationtimestamp| type| source ---|---|--- 2026-06-25 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp34su7fvx26...
Malicious code in rstreams-metrics (npm)
The rstreams-metrics npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...
Malicious code in @kl-dolphin/jump (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8f3b07b54ef6c2330673267757bff28f45494cbba5f6a71a78115a2a54f10b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-13164
creationtimestamp| type| source ---|---|--- 2026-06-24 17:45:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2hs5aelg2p...
CVE-2026-56111
creationtimestamp| type| source ---|---|--- 2026-06-24 17:02:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2ffu2mqq2o 2026-06-24 18:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2imyrtgz2d 2026-07-13 22:00:19+00:00| seen|...
CVE-2025-71332
creationtimestamp| type| source ---|---|--- 2026-06-24 13:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozzaue52o2s 2026-06-25 11:39:45+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mp4dthrnkv2p 2026-07-14 11:07:06+00:00| seen|...
GHSA-WCMJ-X466-56MM
creationtimestamp| type| source ---|---|--- 2026-06-24 03:42:03+00:00| seen| https://gist.github.com/alon710/930931f8715581f8f0d0a4111bb621a6...
CVE-2026-27604 FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions
FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated access to privileged /api/system/ endpoints. Because system resolves to the cron admin identity,...
Malicious code in new-ecro-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0826d146dbc513ac14f403eaa9ba65dffbd04da52c55ff1840ad153dab96e87 The package publishes verbatim big.js v7.0.1 source including the upstream copyright header, README, repository URL pointing to MikeMcl/big.js, and t...
Malicious code in vitest-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27abcc7f2373309feb253b0cc48b1a8bae7c54a3c43aed0c57add697f4067aba Package name vitest-cli impersonates the official Vitest project while declaring empty author, homepage, repository, and bugs metadata. The...
CVE-2026-48970
creationtimestamp| type| source ---|---|--- 2026-06-22 15:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov6jlwa6l2v...
CVE-2026-56448
creationtimestamp| type| source ---|---|--- 2026-06-22 13:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116794001321530958 2026-06-22 13:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mouymrppti2j 2026-06-22 15:49:41+00:00| seen|...
CVE-2026-35221
creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:44+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou46ywiit2v...
CVE-2026-6645
creationtimestamp| type| source ---|---|--- 2026-06-22 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116791877623901189 2026-06-22 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mou2gzwtck2t 2026-06-22 04:37:44+00:00| seen|...
CVE-2026-12784
creationtimestamp| type| source ---|---|--- 2026-06-21 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116786923158989964 2026-06-21 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mortzyyqfs2t 2026-06-21 08:07:01+00:00| seen|...
CVE-2026-12780
creationtimestamp| type| source ---|---|--- 2026-06-21 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moroz2af4t2o 2026-06-21 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116786569196289935 2026-06-22 12:39:57+00:00| seen|...
PT-2026-51188
Name of the Vulnerable Software and Affected Versions AOMEI Partition Assistant versions prior to 10.10.2 Description Improper access controls exist within the Kernel Driver component, specifically affecting unknown code in the ampa10.sys library. This issue allows a local attacker to manipulate...
CVE-2019-25762
creationtimestamp| type| source ---|---|--- 2026-06-19 19:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4oi4v5b2i...