PT-2026-49578

Name of the Vulnerable Software and Affected Versions React Router version 7 Description Insufficient Cross-Site Request Forgery CSRF checks in Framework Mode allow bypasses when using 'PUT', 'PATCH', or 'DELETE' requests, as the checks were primarily applied to 'POST' requests. CSRF is a type of...

CVE-2026-50879

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-50879

The vulnerability CVE-2026-50879 affects Andrei Marcu linx-server v2.3.8, specifically the uploadPostHandler component. A crafted POST request can trigger a Denial of Service (DoS). The connected sources confirm the issue but do not provide exploit details or a remediation patch/version. There is...

CVE-2026-53474

creationtimestamp| type| source ---|---|--- 2026-06-14 23:16:06+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvmivqxy2m 2026-06-15 16:32:00+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpia5svc2b 2026-06-16 16:37:05+00:00| seen|...

CVE-2026-41005

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moban2bf3u2c...

CVE-2026-53807

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamt2x672p...

CVE-2026-49083

creationtimestamp| type| source ---|---|--- 2026-06-14 15:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mob2sgujkz2q 2026-06-16 06:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4p56r3k2n 2026-07-13 22:00:24+00:00| seen|...

CVE-2026-49079

creationtimestamp| type| source ---|---|--- 2026-06-14 14:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moaxgwzv452w 2026-06-17 14:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moii5uqqom2j 2026-07-13 22:00:24+00:00| seen|...

CVE-2026-44894

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamj2elo72y...

CVE-2026-44893

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamitgm242d...

CVE-2026-45674

creationtimestamp| type| source ---|---|--- 2026-06-14 10:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moaj5jy7g32v 2026-06-15 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moce77eius2t 2026-06-15 16:32:32+00:00| seen|...

CVE-2026-47137

creationtimestamp| type| source ---|---|--- 2026-06-14 08:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moachcwmfn2c 2026-07-09 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75n7h44f2r...

Malicious code in npm-sandbox-research-8b2f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916280d3906e0f04caa7f46135039e4a42b03a5c96091c1555ad2ab0e86b923b On install, package.json runs postinstall: node run.js, which loads beacon scripts beacon8.js, beaconlinux.js that import childprocess, os, and http,...

MAL-2026-5764 Malicious code in sys-info-cli-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1423c435a0e9e86338dd64d138fb1697580751ade2b7486880e21785e1b3eb47 The package's collect.js gathers host identifiers os.hostname, os.homedir along with filesystem and childprocess introspection and POSTs them to a...

Malicious code in sys-info-cli-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1423c435a0e9e86338dd64d138fb1697580751ade2b7486880e21785e1b3eb47 The package's collect.js gathers host identifiers os.hostname, os.homedir along with filesystem and childprocess introspection and POSTs them to a...

CVE-2026-49085

creationtimestamp| type| source ---|---|--- 2026-06-14 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo7zbd6pcz26 2026-06-15 21:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7fiilag2j 2026-06-17 07:00:49+00:00| seen|...

CVE-2026-6961

creationtimestamp| type| source ---|---|--- 2026-06-14 01:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7kzf7dl72p...

openSUSE 16 Security Update : java-21-openj9 (openSUSE-SU-2026:20947-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20947-1 advisory. Changes in java-21-openj9: - Make post scripts less noisy bsc1267355 - Use libalternatives instead of update-alternatives for distributions wher...

CVE-2025-55660

creationtimestamp| type| source ---|---|--- 2026-06-13 22:34:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7csmvpjk2f...

Malicious code in mailconfirmer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb184ffa15fd011b84658a6b5cd68582e78827258a8373f0da1ef34248bfb09 The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log demo messages. The real...