CVE-2026-49079

creationtimestamp| type| source ---|---|--- 2026-06-14 14:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moaxgwzv452w 2026-06-17 14:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moii5uqqom2j 2026-07-13 22:00:24+00:00| seen|...

CVE-2026-44894

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamj2elo72y...

CVE-2026-44893

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamitgm242d...

CVE-2026-45674

creationtimestamp| type| source ---|---|--- 2026-06-14 10:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moaj5jy7g32v 2026-06-15 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moce77eius2t 2026-06-15 16:32:32+00:00| seen|...

CVE-2026-47137

creationtimestamp| type| source ---|---|--- 2026-06-14 08:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moachcwmfn2c 2026-07-09 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75n7h44f2r...

Malicious code in npm-sandbox-research-8b2f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916280d3906e0f04caa7f46135039e4a42b03a5c96091c1555ad2ab0e86b923b On install, package.json runs postinstall: node run.js, which loads beacon scripts beacon8.js, beaconlinux.js that import childprocess, os, and http,...

MAL-2026-5764 Malicious code in sys-info-cli-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1423c435a0e9e86338dd64d138fb1697580751ade2b7486880e21785e1b3eb47 The package's collect.js gathers host identifiers os.hostname, os.homedir along with filesystem and childprocess introspection and POSTs them to a...

Malicious code in sys-info-cli-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1423c435a0e9e86338dd64d138fb1697580751ade2b7486880e21785e1b3eb47 The package's collect.js gathers host identifiers os.hostname, os.homedir along with filesystem and childprocess introspection and POSTs them to a...

CVE-2026-49085

creationtimestamp| type| source ---|---|--- 2026-06-14 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo7zbd6pcz26 2026-06-15 21:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7fiilag2j 2026-06-17 07:00:49+00:00| seen|...

CVE-2026-6961

creationtimestamp| type| source ---|---|--- 2026-06-14 01:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7kzf7dl72p...

openSUSE 16 Security Update : java-21-openj9 (openSUSE-SU-2026:20947-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20947-1 advisory. Changes in java-21-openj9: - Make post scripts less noisy bsc1267355 - Use libalternatives instead of update-alternatives for distributions wher...

CVE-2025-55660

creationtimestamp| type| source ---|---|--- 2026-06-13 22:34:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7csmvpjk2f...

Malicious code in mailconfirmer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb184ffa15fd011b84658a6b5cd68582e78827258a8373f0da1ef34248bfb09 The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log demo messages. The real...

MAL-2026-5750 Malicious code in mailconfirmer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb184ffa15fd011b84658a6b5cd68582e78827258a8373f0da1ef34248bfb09 The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log demo messages. The real...

CVE-2025-55652

creationtimestamp| type| source ---|---|--- 2026-06-13 20:29:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo73t32vng2d...

Malicious code in oa-crm-webapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cdaf89f7ae5fd12400ea55acd4849e8e5095dfc51188d3339ecdfa5dc0f2a1 [email protected] is a dependency-confusion payload squatting an internal-sounding package name. package.json declares a postinstall hook node...

CVE-2026-48558

creationtimestamp| type| source ---|---|--- 2026-06-13 15:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo6jgxce6n2p 2026-06-14 17:33:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobcidnjl72t 2026-06-15 16:30:48+00:00| seen|...

BIT-JENKINS-2026-53441

Jenkins 2.483 through 2.567 both inclusive, LTS 2.492.1 through 2.555.2 both inclusive does not escape the user-provided description of a generic offline cause that could be set through the POST config.xml API, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers...

Exploit for CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via function...

MAL-2026-5733 Malicious code in node-app-doctor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addccbccd4c3c52cd67098a571ed77a4f55ea2303746f421b22b5bbf175a345e collect.js gathers host identifiers via os.hostname and os.homedir, reads local filesystem state with fs.existsSync, spawns childprocess commands, an...