4875 matches found
Embedded Malicious Code
Overview guardrails-ai is an Adding guardrails to large language models. Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tamper...
CVE-2026-42864
creationtimestamp| type| source ---|---|--- 2026-05-11 20:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wl32sv2z 2026-05-11 20:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wl32sv2z 2026-05-11 20:35:42+00:00| seen|...
CVE-2026-6146
creationtimestamp| type| source ---|---|--- 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 21:34:10+00:00| seen|...
CVE-2026-45006
creationtimestamp| type| source ---|---|--- 2026-05-11 18:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdoj2cq2q 2026-05-11 18:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdoj2cq2q 2026-05-11 19:20:13+00:00| seen|...
CERTFR-2026-ACT-021
creationtimestamp| type| source ---|---|--- 2026-05-11 12:08:19+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mllah4ffi42y 2026-05-11 12:08:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116555861087874714 2026-05-11 16:34:25+00:00| seen|...
CVE-2026-8230
creationtimestamp| type| source ---|---|--- 2026-05-10 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlidefjjkj2r...
CVE-2026-42575
creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dmifud2f 2026-05-09 21:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6woiu5p2p 2026-05-10 03:00:27+00:00| seen|...
CVE-2026-44844
creationtimestamp| type| source ---|---|--- 2026-05-08 23:12:51+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g47v-rwmh-r9f8...
CLSA-2026-1778276927 kernel: Fix of 33 CVEs
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - ext4: avoid OOB when system.data xattr changes underneath the filesystem CVE-2024-47701 - gpiolib: cdev: fix uninitialised kfifo CVE-2024-36898 - wifi: mt76: Fix...
CVE-2026-44214
creationtimestamp| type| source ---|---|--- 2026-05-08 20:49:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m9g3-3g99-mhpx 2026-05-26 22:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms26w6awm2h...
EUVD-2026-28697
In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for handle opening Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use mayseeallnamespaces helper...
UBUNTU-CVE-2026-43333
In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTRTOBUF pointers checkmemaccess matches PTRTOBUF via basetype which strips PTRMAYBENULL, allowing direct dereference without a null check. Map iterator ctx-key and ctx-value are PTRTOBUF |...
ShinyHunters escalates Canvas attacks with school login defacements
Days after confirming a major data breach, Instructure is now facing a second blow. Earlier this week, Instructure confirmed a major data breach affecting its cloud‑hosted Canvas environment, with the ShinyHunters group claiming it stole hundreds of millions of records tied to thousands of school...
GHSA-267C-6GRR-H53F
creationtimestamp| type| source ---|---|--- 2026-05-08 03:00:06+00:00| seen| Telegram/xvoYgOFnUf5jFw65bW2FC7fcn6orx4l4LTjm0d68ZkOEzo...
PT-2026-38674
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...
PT-2026-38675
Name of the Vulnerable Software and Affected Versions cPanel Nova plugin versions prior to 11.136.0.9 cPanel Nova plugin versions prior to 11.136.1.10 WP Squared cPanel Nova plugin versions prior to 11.134.0.25 cPanel Nova plugin versions prior to 11.132.0.31 cPanel Nova plugin versions prior to...
PT-2026-38673
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...
CVE-2026-32207
creationtimestamp| type| source ---|---|--- 2026-05-07 23:09:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdjiw4jr2w 2026-05-07 23:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcdlcfhct2o 2026-05-08 02:34:05+00:00| seen|...
CVE-2026-39836
creationtimestamp| type| source ---|---|--- 2026-05-07 22:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7s2lbje2v 2026-05-08 12:01:27+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoo2vosj2d 2026-05-15 16:19:42+00:00| seen|...