CVE-2026-59874

creationtimestamp| type| source ---|---|--- 2026-07-08 17:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5opkl5622x 2026-07-11 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqecrablfk2f 2026-07-20 22:35:09+00:00| published-proof-of-concept|...

CVE-2026-29009

creationtimestamp| type| source ---|---|--- 2026-07-08 17:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n5jdpza2x 2026-07-09 04:02:39+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq6qsygvcf2s...

CVE-2026-59261

creationtimestamp| type| source ---|---|--- 2026-07-08 17:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n2dzrvk2g 2026-07-14 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqn7qqgi3z25...

CVE-2026-42505

creationtimestamp| type| source ---|---|--- 2026-07-08 17:20:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5mx4lmyo2y 2026-07-09 12:00:57+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq7lkaehpi2d 2026-07-12 12:00:56+00:00| seen|...

MAL-2026-6988 Malicious code in @vite-tab/tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af865d1cf7d45f2b4c2a73eebcfcd1a1a6aba9a36f33bf8256ef4d7235903c @vite-tab/tab republishes Vite's codebase under a different name while impersonating the upstream project: package.json declares bin: vite:...

CVE-2026-58657

creationtimestamp| type| source ---|---|--- 2026-07-08 16:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ldyi3xf26...

CVE-2026-9074

creationtimestamp| type| source ---|---|--- 2026-07-08 16:42:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kryt5gx2v 2026-07-08 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ohuyub52l 2026-07-11 04:07:06+00:00| seen|...

CVE-2026-49147

creationtimestamp| type| source ---|---|--- 2026-07-08 16:41:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5kreqe252c...

MAL-2026-7000 Malicious code in pipo-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259159c0505b819905dcaf53172d98a4fd590a9ae1a40f87d2be4c1a7fdc4065 This package is a dependency-confusion payload published at an abnormally high version 9999.0.0 targeting an internal package name pipo-sdk. The...

CVE-2026-59725

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...

CVE-2026-59702

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...

CVE-2026-56775

creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5jcs7swc2k...

CVE-2026-14454

creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jcpi77c2k 2026-07-09 17:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqa5po5axo24...

CVE-2026-59253

creationtimestamp| type| source ---|---|--- 2026-07-08 16:12:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5j5g5ct72l...

CVE-2026-56776

creationtimestamp| type| source ---|---|--- 2026-07-08 16:09:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5iyjp3my2w...

CVE-2026-60125

creationtimestamp| type| source ---|---|--- 2026-07-08 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ipsgfyo2w...

CVE-2026-60124

creationtimestamp| type| source ---|---|--- 2026-07-08 15:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ieypywc2z...

CVE-2026-59725

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...

CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...

CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...