1370 matches found
MAL-2026-2981 Malicious code in @bmg-web/bmg-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59b2c3d1c98e7a5f4faae9549ed4f302c9273e1efeaee63e70f3013300327c2 The package @bmg-web/bmg-button was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in @bmg-web/bmg-ajax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0060c1d5029ed1bcb3ed00c20e6a283a930b13d6e93072cebb3e97e45b78d The package @bmg-web/bmg-ajax was found to contain malicious code. Source: ossf-package-analysis...
MySQL -- Multiple vulnerabilities
Oracle reports: See linked CVE's for details...
MAL-2026-2951 Malicious code in hifromhere1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82931dc7313b2b9b93b8664655cbe445702e0fdcf1cc7e587b27758d2ef9cda1 The package hifromhere1 was found to contain malicious code. Source: ossf-package-analysis...
CVE-2026-40482
creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 02:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqe6ggy5x2t...
CVE-2026-40321
creationtimestamp| type| source ---|---|--- 2026-04-17 23:20:15+00:00| published-proof-of-concept| Telegram/3g7V6SV71PzaXn8Yubvw4Z7qK4NE-jaYcye5068Hc2mjiw 2026-04-17 23:20:20+00:00| published-proof-of-concept| Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI 2026-04-17 23:25:49+00:00| see...
CVE-2026-40518
creationtimestamp| type| source ---|---|--- 2026-04-17 18:45:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjplgz22wp2q 2026-04-17 21:22:32+00:00| seen| Telegram/1afGr9vW06Zk0J3YeUW4MdlUf8TA53EPyuLeVgpLZqfvxp8...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007522 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: fix ltout double free on completion race Always remove linked timeout on iolinktimeoutfn...
CVE-2025-68109
creationtimestamp| type| source ---|---|--- 2026-04-16 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mjncncgazj2p...
ffensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
ofensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
CVE-2026-6132
creationtimestamp| type| source ---|---|--- 2026-04-13 00:00:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjdkpq6uf32b 2026-04-13 00:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdkpu4olb24 2026-04-13 00:00:34+00:00| seen|...
MAL-2026-2560 Malicious code in @b2b-portal/uch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89eb419e1f7beb102007973e2d226cb2cb5f534096cbc2be8dc538324f3f19db The package @b2b-portal/uch was found to contain malicious code. Source: ghsa-malware e559f0d2d934ad98bda8c11ca6613644ecf3f2584bee7e75c7edf59ecda35d3...
CVE-2026-5226
creationtimestamp| type| source ---|---|--- 2026-04-11 02:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rbqz2cv23 2026-04-19 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjv4hdt2ad2h...
CVE-2026-35480
go-ipld-prime is an implementation of the InterPlanetary Linked Data IPLD spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.22.0, the DAG-CBOR decoder uses collection sizes declared in CBOR headers a...
CVE-2026-5811
creationtimestamp| type| source ---|---|--- 2026-04-09 00:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizle4bqyj2d...
CVE-2026-32540
creationtimestamp| type| source ---|---|--- 2026-04-08 13:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miyfmzazry2h...
Timeshare owners warned to watch out for cartel-linked scams
If you own a timeshare and have been searching for a way out, you need to know who may be targeting you. In February, the US Treasury Department announced sanctions against a timeshare fraud network linked to a major Mexican drug cartel, the Jalisco New Generation Cartel CJNG. These aren’t your...
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs
Iran-affiliated cyber actors are targeting internet-facing operational technology OT devices across critical infrastructures in the U.S., including programmable logic controllers PLCs, cybersecurity and intelligence agencies warned Tuesday. "These attacks have led to diminished PLC functionality,...