CVE-2026-14545

creationtimestamp| type| source ---|---|--- 2026-07-28 08:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxdaviyq2q 2026-07-28 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrpltsrhpu22...

CVE-2026-53669

A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...

CVE-2026-65446

creationtimestamp| type| source ---|---|--- 2026-07-28 00:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro6crmmps2b...

EUVD-2026-49667

Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...

CVE-2026-65448

creationtimestamp| type| source ---|---|--- 2026-07-28 00:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5a3kdv22q...

CVE-2026-61953

creationtimestamp| type| source ---|---|--- 2026-07-28 00:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4wpqsah2i 2026-07-28 18:07:27+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpyv4ejcd27...

CVE-2026-65445

creationtimestamp| type| source ---|---|--- 2026-07-28 00:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4l5ital2i...

PT-2026-65573

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation which allows query strings like .css?... and path resolution which strips query strings, combined with no...

CVE-2026-61953

Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...

Malicious Package

Overview chai-as-regulated is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview 0x2ai-demo3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview beaver-ui-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview dolyame-boxy-atom-desktop-bnpl-container is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...

Malicious Package

Overview @godscene/web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tinkoff-statist-web-typed-client-test.golden.retriever is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

Malicious Package

Overview dolyame-boxy-desktop-bnpl-card-gallery is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview pfp-block-independent-iframe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview tramvai-tinkoff-module-legacy-popup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious Package

Overview bigops-products-insurance is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview sextant-cli-linux-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...