41707 matches found
CVE-2026-66708
creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...
CVE-2026-71476
creationtimestamp| type| source ---|---|--- 2026-08-06 20:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgwbqkenv23...
CVE-2026-18258
creationtimestamp| type| source ---|---|--- 2026-08-06 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtg7o27v2t...
Malicious code in vite-plugin-cleaner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bc445ea196f979ad69189f4498586a09a51855b97e95dea02d01d197620237 package.json declares an optionalDependency vite-cleaning-tools pointing at github:vite-plugins/vite-cleaning-tools with no commit SHA or tag, so npm...
MAL-2026-13466 Malicious code in wormgpt-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c The package's bin entries wormgpt-cli, wormgpt, deepholegpt, wgpt map to bin/victim.js, which silently spawns a detached implant on any invocation...
CVE-2026-33930
creationtimestamp| type| source ---|---|--- 2026-08-06 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgn2qtzic2r...
CVE-2026-13342 Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password
The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeati...
CVE-2026-13342
CVE-2026-13342 affects the Security Optimizer WordPress plugin (versions 1.5.8–1.6.4). The IP-based login restriction can be bypassed due to improper validation, allowing unauthenticated requests from non-allowlisted IPs to access the login form. Impact: defeats administrator-configured access co...
CVE-2026-58158
creationtimestamp| type| source ---|---|--- 2026-08-06 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgjpi53yw2r...
CVE-2026-18277
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...
CVE-2026-65581
creationtimestamp| type| source ---|---|--- 2026-08-06 16:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggu7rmiy2l...
CVE-2026-65572
creationtimestamp| type| source ---|---|--- 2026-08-06 16:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggjkbgae2u...
CVE-2026-65556
creationtimestamp| type| source ---|---|--- 2026-08-06 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggjij3sw23...
CVE-2026-54489
creationtimestamp| type| source ---|---|--- 2026-08-06 16:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg6rq76m2u 2026-08-08 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mskt6cv4as2o...
CVE-2026-67261
creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i37bwfbsgkjvx 2026-08-06 16:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxtqwo52u 2026-08-06 20:01:01+00:00| seen|...
CVE-2026-66662
creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg37i3ay2i 2026-08-06 22:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msh24av7pe2e...
CVE-2026-66712
creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzmvka72b...
CVE-2026-65579
creationtimestamp| type| source ---|---|--- 2026-08-06 16:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfxp2rdy2m...