CVE-2025-58218

creationtimestamp| type| source ---|---|--- 2026-07-28 14:25:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrpmhj66mu27...

CVE-2026-51302

creationtimestamp| type| source ---|---|--- 2026-07-28 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplmo2ldr2r 2026-07-29 01:00:03+00:00| seen| https://t.me/GithubRedTeam/95603 2026-07-29 04:00:05+00:00| seen| Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgA...

CVE-2026-51300

creationtimestamp| type| source ---|---|--- 2026-07-28 14:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplmmp43k2s...

CVE-2026-64648

A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of...

MAL-2026-11135 Malicious code in ethers-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa36b9a8ec228142a26760738fbbca9c72f9634ed0abedb9d5beeae6a2441244 Package name mimics the popular ethers library. Its exported wallet API WalletClient/createWalletClient/parseAccount accepts an Ethereum private key...

Malicious code in triage_bot_using_sdkv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed39efd544cae19da3ed546fecb2383729aef637bf623e00a9cf02f1f8ded05c package.json registers a preinstall hook that runs index.js on npm install. index.js collects os.hostname, os.userInfo, home directory, DNS server...

MAL-2026-11154 Malicious code in xerohub-discord-voice-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066cb7d27a71055b89630648ee5ae6eed64d6db93e883de66a5db678cfa7663c xerohub-discord-voice-v2 advertises itself as a Discord voice-channel joiner but its exported startVoiceJoiner flow covertly forwards the caller's...

CVE-2026-15393

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE plugin for WordPress (WordPress plugin with 600+ patterns, 58 blocks) is vulnerable to Stored Cross-Site Scripting via the postMeta.font.size Block Attribute in all versions up to and including 2.2.11. The root cause is insufficient input ...

CVE-2026-15393

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and...

CVE-2026-65880

creationtimestamp| type| source ---|---|--- 2026-07-28 12:27:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfvx6jg224...

CVE-2026-59248

creationtimestamp| type| source ---|---|--- 2026-07-28 12:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfl753522x...

CVE-2026-15267

creationtimestamp| type| source ---|---|--- 2026-07-28 12:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpezcbinh2i...

CVE-2026-10207

creationtimestamp| type| source ---|---|--- 2026-07-28 12:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpehfd6be23 2026-07-28 15:06:49+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpos4bbbw2d...

CVE-2026-14328

creationtimestamp| type| source ---|---|--- 2026-07-28 11:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdiqtrku23...

CVE-2026-11598

creationtimestamp| type| source ---|---|--- 2026-07-28 11:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22...

CVE-2026-14785

creationtimestamp| type| source ---|---|--- 2026-07-28 11:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcs6aji72x 2026-07-28 12:14:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpf6bycpd2u...

CVE-2026-13161

creationtimestamp| type| source ---|---|--- 2026-07-28 11:30:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcpxmcwm2j...

CVE-2026-12800

creationtimestamp| type| source ---|---|--- 2026-07-28 11:29:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcnsen6i2u...

CVE-2026-14171

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-14169

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdebf67v27...