41246 matches found
CVE-2026-9291
creationtimestamp| type| source ---|---|--- 2026-05-22 22:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhzb23z742o...
CVE-2026-39968
creationtimestamp| type| source ---|---|--- 2026-05-22 22:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhysg2wbj2n...
CVE-2026-39970
creationtimestamp| type| source ---|---|--- 2026-05-22 22:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhygjnno62o 2026-05-23 20:27:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116625766625880175 2026-06-06 11:02:43+00:00| seen|...
CVE-2026-40597
creationtimestamp| type| source ---|---|--- 2026-05-22 22:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxykfjqe2i 2026-06-06 11:02:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmiw2dm4a2l...
CVE-2026-40598
creationtimestamp| type| source ---|---|--- 2026-05-22 22:19:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxqruzhh2h...
CVE-2026-40864 JupyterHub: Cross-origin form POSTs bypass XSRF
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection updated in 4.1.0 inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing XSRF checks. The JSON API is not affecte...
CVE-2026-40864 JupyterHub: Cross-origin form POSTs bypass XSRF
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection updated in 4.1.0 inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing XSRF checks. The JSON API is not affecte...
CVE-2026-8992
creationtimestamp| type| source ---|---|--- 2026-05-22 17:44:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhieoeuxg2n 2026-05-27 10:06:39+00:00| seen| https://ccb.belgium.be/advisories/warning-ivanti-has-released-security-updates-address-vulnerabilities-affecting-several...
Malicious code in openmct-couch-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8eff366d17efa64bf8605941d009d01cf7a24aaf011af30faec449fc4a2e28 On npm install, the package's preinstall script runs node index.js and then curls the output of hostname && whoami to...
MAL-2026-4629 Malicious code in openmct-couch-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8eff366d17efa64bf8605941d009d01cf7a24aaf011af30faec449fc4a2e28 On npm install, the package's preinstall script runs node index.js and then curls the output of hostname && whoami to...
CVE-2026-7325
creationtimestamp| type| source ---|---|--- 2026-05-22 17:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhgn63lvp2q...
CVE-2026-9224
creationtimestamp| type| source ---|---|--- 2026-05-22 16:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhfflfuof2k...
CVE-2026-8477
creationtimestamp| type| source ---|---|--- 2026-05-22 16:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhfb3ysbe2p...
CVE-2026-9247
creationtimestamp| type| source ---|---|--- 2026-05-22 16:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhez4l46b2v...
Malicious Package
Overview polymarket-ai-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-42502
creationtimestamp| type| source ---|---|--- 2026-05-22 16:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmheoytrrm2r 2026-06-01 15:38:41+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y...
CVE-2026-42506
creationtimestamp| type| source ---|---|--- 2026-05-22 16:35:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhej6i35b2c 2026-06-30 01:29:32+00:00| seen| https://gist.github.com/illoyd/2131d93f5933897a469738feaf75a3e9...
CVE-2026-0211
creationtimestamp| type| source ---|---|--- 2026-05-22 16:00:05+00:00| seen| https://t.me/GithubRedTeam/85414 2026-05-22 19:00:10+00:00| seen| Telegram/GxW7z8duNlVdfiWWsv41lYfs7S7xkZAHymlGuRAZQODzxg...
MAL-2026-4627 Malicious code in onboardconnect-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c17efe362ab4daf81f1ee7efe462a256ba325562a255906102d10d4a9ee87e5 The package's dist/setup.js script performs an HTTPS POST to https://oc-worker-tenant-api.wpolanco.workers.dev carrying values read from process.env,...