3004 matches found
January 13, 2026—KB5073724 (OS Builds 19045.6809 and 19044.6809)
None None...
MiracleLinux 9 : java-1.8.0-openjdk-1.8.0.462.b08-3.el9.ML.1 (AXSA:2025-10686:14)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10686:14 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Bette...
Malicious Package
Overview @maxcointech/simple-string-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late
The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late By Mark Joseph Marti · January 12, 2026 Introduction As one of the world's largest social media platforms, with over 3 billion active users, Facebook is a frequent target for phishing scams. Hackers aim to hijack use...
CVE-2025-66050
CVE-2025-66050 (Vivotek IP7137, firmware 0200a) is linked to multiple issues: path traversal (CVE-2025-66051), information disclosure via RTSP without authentication (CVE-2025-66049), and command injection through /cgi-bin/admin/setparam.cgi (CVE-2025-66052). All references indicate default admin...
CVE-2024-41804
Xibo is a content management system CMS. An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet Column Formulas. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially...
CVE-2025-23870
Cross-Site Request Forgery CSRF vulnerability in wygk Copyright Safeguard Footer Notice copyright-safeguard-footer-notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through = 3.0...
CVE-2026-22712
creationtimestamp| type| source ---|---|--- 2026-01-09 01:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdtnq37c2o...
CVE-2025-63611
creationtimestamp| type| source ---|---|--- 2026-01-08 20:26:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwswjyjvb2e 2026-01-09 18:33:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbz547se6e22...
CVE-2025-27002
creationtimestamp| type| source ---|---|--- 2026-01-08 11:04:03+00:00| seen| https://gist.github.com/Darkcrai86/3138a900c4bfa360837cebbf4466b279 2026-01-08 17:13:19+00:00| published-proof-of-concept| Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg 2026-01-08 17:13:43+00:00| seen|...
RHSA-2026:0234
creationtimestamp| type| source ---|---|--- 2026-01-08 07:58:30+00:00| seen| https://gist.github.com/Darkcrai86/dd788ac5c935d04107e9a1f5a659a787...
CVE-2026-22185
creationtimestamp| type| source ---|---|--- 2026-01-07 22:11:42+00:00| seen| Telegram/yOJ1PSYGZXjuMcefNZXs0T-wgrkZSLsS2STBsZb-16oZ8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2019-16658
TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...
CVE-2023-27593 vulnerabilities
Vulnerabilities for packages: cilium...
CVE-2025-69084
creationtimestamp| type| source ---|---|--- 2026-01-06 18:07:43+00:00| seen| Telegram/2JFIlsludB2BcoY20V82c0ESHPbtXQoup4wpLAPUk9R9uuY...
Malicious Package
Overview smartspacestoreapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2026-0909
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser. Such manipulation of the argument passwd1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and...
GHSA-6RW7-VPXM-498P vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, argo-workflows, langfuse, wazuh-dashboard, kubeflow-katib, code-server, gitlab-rails-ce-fips, gitlab-rails-ce, librechat, opensearch-dashboards, opensearch-dashboards-fips, py3-jupyterlab, langfuse-fips, kibana, thingsboard, redisinsight,...