40404 matches found
CVE-2026-12161
creationtimestamp| type| source ---|---|--- 2026-06-15 16:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12161 2026-06-16 03:47:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moevbbfxz62m 2026-06-17 06:00:26+00:00| seen|...
CVE-2018-25436
creationtimestamp| type| source ---|---|--- 2026-06-15 15:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnfxlk642w...
Malicious code in nativescript-swisspost-pcc-creative-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c9ef8861d14485e696e98c66d95ee5c2a5a608b213841c9c18b254003ae049 Package masquerades as an internal Swiss Post NativeScript package name nativescript-swisspost-pcc-creative-editor, description literally Security Po...
MAL-2026-5793 Malicious code in nativescript-swisspost-pcc-creative-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c9ef8861d14485e696e98c66d95ee5c2a5a608b213841c9c18b254003ae049 Package masquerades as an internal Swiss Post NativeScript package name nativescript-swisspost-pcc-creative-editor, description literally Security Po...
MAL-2026-5807 Malicious code in sam-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e593046a8f405a1a571d19aaa6bd46db57c4a22fce4b9acfc114dd4eb8ffb6 [email protected] is a malicious package whose only purpose is to deliver a prompt-injection payload targeting AI coding assistants Copilot, Cursor,...
CVE-2026-3375
creationtimestamp| type| source ---|---|--- 2026-06-15 15:38:06+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3modmiexfw62m...
Malicious code in vaults-monitor-cron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c6b9e59e86c40858cb47e91d597b3776fea71def7feb3ca11833625fa3923 On npm install, the package's preinstall hook node postinstall.js || true executes automatically. The script collects hostname, username, and current...
MAL-2026-5779 Malicious code in hemi-supply-cron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41be27601d38eb5c0b527a9ec22b7516734e8eae985a2607ae6d70878f5f1d9 package.json declares a preinstall hook node postinstall.js that fires automatically on npm install. The script collects host identity os.hostname,...
CVE-2026-5038
creationtimestamp| type| source ---|---|--- 2026-06-15 14:30:59+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3modiqffra227 2026-06-17 20:11:38+00:00| seen| https://gist.github.com/alon710/5e84b244224c89ffba5a0429bff51a5c...
CVE-2026-34024
creationtimestamp| type| source ---|---|--- 2026-06-15 13:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modensuage2e...
CVE-2026-49770
creationtimestamp| type| source ---|---|--- 2026-06-15 13:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modeknoxnr2b 2026-06-15 21:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moea74g52u2m 2026-06-16 01:01:01+00:00| seen|...
CVE-2019-25746 WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...
EUVD-2019-20182
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...
CVE-2019-25746 WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...
CVE-2019-25746
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability exploitable via the post parameter. Attackers can target admin.php with action=duplicate_quote_invoice and malicious post values to extract data or modify data. Evidence: authenticated, low-privilege requirement...
CVE-2016-20073 Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php
Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract...
CVE-2026-8386
creationtimestamp| type| source ---|---|--- 2026-06-15 11:52:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mod7vq67zq2d 2026-07-16 12:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8386.yaml 2026-07-17...
CVE-2026-49106
creationtimestamp| type| source ---|---|--- 2026-06-15 11:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mod5tzkdau2o 2026-06-15 21:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7p24cel2p 2026-06-17 08:00:44+00:00| seen|...
