CVE-2026-9294

creationtimestamp| type| source ---|---|--- 2026-05-24 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626962874841105...

Malicious code in workspace-config-loader (npm)

Ten packages published by npm user asdxzxc at version 1.0.10 target developers working on AI and LLM tooling. Each package masquerades as a developer utility while executing a two-stage payload triggered via postinstall: package.json → lib/setup.js → lib/worker.js. Credential harvesting:...

CVE-2026-39965

creationtimestamp| type| source ---|---|--- 2026-05-22 22:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxk3at6w2q...

CVE-2026-8679

creationtimestamp| type| source ---|---|--- 2026-05-22 01:55:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8679.yaml 2026-05-22 09:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmgl3rnuge26 2026-05-22...

Malicious code in deploy-guard-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc19d43e7ea3e330ad8c0cd7330a205d833ebd1fed2ed2f00cd48bcbd77bead The package is a thin dropper. Its package.json postinstall hook runs node -e "tryrequire'childprocess'.execSync'npx env-security-scanner@latest...

CVE-2026-48249

creationtimestamp| type| source ---|---|--- 2026-05-21 19:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5nah2ou2o 2026-05-21 19:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf6i3tggj2c...

CVE-2026-48246

creationtimestamp| type| source ---|---|--- 2026-05-21 19:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf44ohpdc2v 2026-05-21 19:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4blasqq2n...

CVE-2026-1881

creationtimestamp| type| source ---|---|--- 2026-05-21 15:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmeqipufl62u...

MAL-2026-4227 Malicious code in lognest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f45cde243009853b52b584fb6a1af2eae31e637912c8b78f18a8d7ee0d9d0 On import lognest, the package's init.py spawns a detached background subprocess running a sibling check.py lognest/init.py:25...

CVE-2025-13479 IDOR in PosCube's QR Menu

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers. This issue affects QR Menu: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any w...

CVE-2026-44049

creationtimestamp| type| source ---|---|--- 2026-05-21 12:25:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmeg2isdcl2y 2026-05-22 08:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmghqclnym26...

CVE-2026-44060

creationtimestamp| type| source ---|---|--- 2026-05-21 11:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmebzox3tw2c 2026-05-22 07:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgeetzwa72t...

EUVD-2026-31204

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...

CVE-2026-48172

The vulnerability CVE-2026-48172 affects LiteSpeed User-End cPanel Plugin prior to 2.4.5. The issue stems from mishandling of Redis enable/disable features, enabling privilege escalation (possibly to root). In-the-wild exploitation was reported in May 2026. Detection guidance is provided: run gre...

PT-2026-42359

Name of the Vulnerable Software and Affected Versions LiteSpeed User-End cPanel Plugin versions prior to 2.4.5 Description An issue in the mishandling of Redis enable/disable features, specifically within the lsws.redisAble function, allows for incorrect privilege assignment. This flaw enables an...

PosCube QR Menu 安全漏洞

PosCube QR Menu is a QR code electronic menu and ordering management system for the catering industry developed by the Turkish company PosCube. The versions of PosCube QR Menu dated back to May 21052026 and earlier contained a security vulnerability. This vulnerability stemmed from an authorizati...

CVE-2026-35009 Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in addnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a hidden input field VALUE attribute. Attacker...

CVE-2026-39047

creationtimestamp| type| source ---|---|--- 2026-05-20 17:59:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmcib4y7ky2w 2026-05-20 20:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcozwcu5h2q 2026-07-13 22:00:12+00:00| seen|...

Malicious code in iv-stubborn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8934157781e3457974f0609c54f14503424c9077b316f2e8e843e454989922 On npm install, both preinstall and postinstall lifecycle hooks execute index.js, which collects the installer's hostname, all non-internal network...

CVE-2026-5950

creationtimestamp| type| source ---|---|--- 2026-05-20 14:33:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmc4ra55ad24 2026-05-20 14:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc5oop7eh2i 2026-05-21 12:20:25+00:00| seen|...