CVE-2026-1881

creationtimestamp| type| source ---|---|--- 2026-05-21 15:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmeqipufl62u...

MAL-2026-4227 Malicious code in lognest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f45cde243009853b52b584fb6a1af2eae31e637912c8b78f18a8d7ee0d9d0 On import lognest, the package's init.py spawns a detached background subprocess running a sibling check.py lognest/init.py:25...

CVE-2025-13479 IDOR in PosCube's QR Menu

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers. This issue affects QR Menu: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any w...

CVE-2026-44049

creationtimestamp| type| source ---|---|--- 2026-05-21 12:25:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmeg2isdcl2y 2026-05-22 08:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmghqclnym26...

CVE-2026-44060

creationtimestamp| type| source ---|---|--- 2026-05-21 11:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmebzox3tw2c 2026-05-22 07:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgeetzwa72t...

EUVD-2026-31204

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...

CVE-2026-48172

The vulnerability CVE-2026-48172 affects LiteSpeed User-End cPanel Plugin prior to 2.4.5. The issue stems from mishandling of Redis enable/disable features, enabling privilege escalation (possibly to root). In-the-wild exploitation was reported in May 2026. Detection guidance is provided: run gre...

PosCube QR Menu 安全漏洞

PosCube QR Menu is a QR code electronic menu and ordering management system for the catering industry developed by the Turkish company PosCube. The versions of PosCube QR Menu dated back to May 21052026 and earlier contained a security vulnerability. This vulnerability stemmed from an authorizati...

PT-2026-42359

Name of the Vulnerable Software and Affected Versions LiteSpeed User-End cPanel Plugin versions prior to 2.4.5 Description An issue in the mishandling of Redis enable/disable features, specifically within the lsws.redisAble function, allows for incorrect privilege assignment. This flaw enables an...

CVE-2026-35009 Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in addnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a hidden input field VALUE attribute. Attacker...

CVE-2026-39047

creationtimestamp| type| source ---|---|--- 2026-05-20 17:59:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmcib4y7ky2w 2026-05-20 20:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcozwcu5h2q 2026-07-13 22:00:12+00:00| seen|...

Malicious code in iv-stubborn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8934157781e3457974f0609c54f14503424c9077b316f2e8e843e454989922 On npm install, both preinstall and postinstall lifecycle hooks execute index.js, which collects the installer's hostname, all non-internal network...

CVE-2026-5950

creationtimestamp| type| source ---|---|--- 2026-05-20 14:33:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmc4ra55ad24 2026-05-20 14:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc5oop7eh2i 2026-05-21 12:20:25+00:00| seen|...

Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

CVE-2026-8627

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:58+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmbp7aqqp524 2026-05-20 10:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmbpbdx6zh2x...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nsfs: Permission checks for handling opening have been tightened. Even privileged services should not necessarily be able to access the namespaces of other privileged services, so that they cannot leak information to each other...

CVE-2026-6549

creationtimestamp| type| source ---|---|--- 2026-05-20 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmb6ivqo4q2a...

CVE-2026-43618

creationtimestamp| type| source ---|---|--- 2026-05-20 03:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw3floka2w 2026-05-20 03:12:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmawptyklz2i 2026-05-20 04:18:43+00:00| seen|...

CVE-2026-6871

creationtimestamp| type| source ---|---|--- 2026-05-20 02:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauud2jhc2i...

MAL-2026-4239 Malicious code in etherjs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335b4f699510e2bb1171a9137655f6977d5554f508e612eab97b4239c1249be1 package.json declares a postinstall script that performs an HTTPS GET to an ephemeral pinggy-free.link tunnel URL...