4875 matches found
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server EMS deployments to deliver a credential-stealing malware family dubbed EKZ Infostealer. "The campaign abused trusted endpoint management infrastructure to deliver malware...
Malicious code in @service-suppliers/set_suppliers_loading_stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52d21512cf72b6b9822978fa95b217f0412f0d8ec55e5667addf4a486ad0965b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-7802
creationtimestamp| type| source ---|---|--- 2026-05-28 07:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6mbxne2l 2026-05-28 07:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhcdq5r42p...
CVE-2026-5737
creationtimestamp| type| source ---|---|--- 2026-05-28 06:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgtbfpf62h...
CVE-2026-2374
creationtimestamp| type| source ---|---|--- 2026-05-28 06:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmvgi2bzcs2k...
RockyLinux 9 : webkit2gtk3 (RLSA-2026:19206)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19206 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43213 webkitgtk: Processing maliciously crafted we...
CVE-2026-44886
Pi.Alert’s web interface is vulnerable to unauthenticated blind SQL injection in the /pialert/php/server/devices.php endpoint when action=getDevicesTotals is used and the scansource parameter is injected. From 2024-06-29 until 2026-05-07, unauthenticated users could trigger the vulnerability; the...
CVE-2026-44888
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile endpoint writes user-supplied numeric config values e.g., SMTPPORT directly into pialert.conf without validation. Since pialert.conf is loaded via Python's exec every 3–5 minutes...
CVE-2026-48149
creationtimestamp| type| source ---|---|--- 2026-05-27 19:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n 2026-05-27 19:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n...
CVE-2026-48027 Compromised Nx Console version 18.95.0
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for 18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the...
Malicious code in bulletproof-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00849bd08fa4e9ebb1877039ab1ff287fd0ab89a683a45229176f717b6db1e9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-45837
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arenavmclose on fork arenavmopen only bumps vml-mmapcount but never registers the child VMA in arena-vmalist. The vml-vma always points at the parent VMA, so after parent munmap the pointer dangles. If...
UBUNTU-CVE-2026-45837
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arenavmclose on fork arenavmopen only bumps vml-mmapcount but never registers the child VMA in arena-vmalist. The vml-vma always points at the parent VMA, so after parent munmap the pointer dangles. If...
CVE-2026-45837
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arenavmclose on fork arenavmopen only bumps vml-mmapcount but never registers the child VMA in arena-vmalist. The vml-vma always points at the parent VMA, so after parent munmap the pointer dangles. If...
CVE-2026-40816
creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:14+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:11:20+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232 2026-05-27 08:12:05+00:00| seen|...
CVE-2026-7493
creationtimestamp| type| source ---|---|--- 2026-05-27 04:53:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmspn5xkta2e...
PT-2026-44044
Name of the Vulnerable Software and Affected Versions Nx Console version 18.95.0 Description A malicious version of Nx Console, which serves as the user interface for Nx and Lerna, was published to the Visual Studio Marketplace and OpenVSX. The compromised version was available for approximately ...
Malicious code in web3-prices (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee650bfe594eb17193a4760fd6fc279eb10670ae045500913ea673951427b47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in int-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 369f6932b06597ffc51269a3c2634d158a10270a5c79eb9e4842818e8570c544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...