CVE-2026-54222

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6qkof7z2j...

CVE-2026-54224

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219...

CVE-2026-54220

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol66nmcxv2t...

CVE-2026-54221

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6zj5mne2o...

EUVD-2026-37851

Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id=$busid...

CVE-2026-55740

Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id=$busid...

EUVD-2026-37849

The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-37848

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on the replacefile function. This makes it...

CVE-2026-40783

creationtimestamp| type| source ---|---|--- 2026-06-18 05:07:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mok2knrcv52i...

CVE-2026-12390

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-02 2026-06-18 21:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molqnbrciv2i...

CVE-2026-50034

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01 2026-06-18 20:07:56+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g...

CVE-2026-40455

creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwmyt6s62t...

CVE-2026-40456

creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwe2efrh23...

CVE-2026-50643

creationtimestamp| type| source ---|---|--- 2026-06-18 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-50643 2026-06-18 11:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokroeslwu2f...

CVE-2026-12569

creationtimestamp| type| source ---|---|--- 2026-06-18 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojojjvsnz2c 2026-06-18 02:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojqerhu472k 2026-06-25 19:26:46+00:00| seen|...

CVE-2026-48768

creationtimestamp| type| source ---|---|--- 2026-06-18 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojjj35nrc2t 2026-06-18 01:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojpsuhhbw2z 2026-06-19 14:10:24+00:00| seen|...

CVE-2026-49133

creationtimestamp| type| source ---|---|--- 2026-06-17 23:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhot6zj72f...

CVE-2026-54387

creationtimestamp| type| source ---|---|--- 2026-06-17 23:23:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c 2026-08-02 15:48:02+00:00| seen|...

CVE-2026-11407

creationtimestamp| type| source ---|---|--- 2026-06-17 23:08:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgm4xmdy2j...

Malicious code in uol-simple-api-futebol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962c38ed6ec061ce6a530aeea5a960dfc2b75caec56f7a1bc648f6b6cb655271 The package's only documented function, getJogos default export, unconditionally invokes an internal helper named prepareCacheMatchs which POSTs the...