Malicious code in exodus-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bf93b626689e980ef2e9c4ba33fd95e81d6a04c665f85908c8cf07b8b36e14 Package name impersonates the Exodus cryptocurrency wallet brand. package.json declares "postinstall": "node src/canary.js", and src/canary.js perfor...

Malicious code in @klapp-about/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715f07e0a1984fc9eb7d6432fc2491b08139755426b3c8905ba2d9274e2d4875 On npm install, the package's preinstall hook node index.js collects host and user identity data — os.hostname, os.userInfo.username, dirname,...

CVE-2026-00000

creationtimestamp| type| source ---|---|--- 2026-06-09 15:00:12+00:00| published-proof-of-concept| Telegram/TPZhP3a04vI9AManDnxQiLM92frB40hJI3gtpEixtxo5IZo 2026-06-09 23:00:05+00:00| published-proof-of-concept| Telegram/avQcqITCN0CdPqbuzPd1c2U29MoQRxNSjCudrYTZic4II...

poc-lab-kit

poc-lab-kit Recent CVE PoC & reproduction scripts. Focused on...

ecommerce-poc

Event-Driven E-Commerce Saga POC This project is a small even...

CVE-2026-39023

creationtimestamp| type| source ---|---|--- 2026-06-09 11:00:17+00:00| published-proof-of-concept| Telegram/u-phHdhtXJBm23j7Z55op0F75fWfK3k9htcZvFqyTuOau08 2026-06-09 15:00:06+00:00| published-proof-of-concept| Telegram/zS0m-Smw9tMC2xQZhVRiFtrXmVStzlksgIyfU5bMHDdEXnY 2026-07-12 11:00:03+00:00|...

curl: curl-ipv4-percent-normalization-SSRF

Summary: six or fewer sentences describing the issue in your own human voice and optionally a short proof-of-concept script Affected version Which curl/libcurl version are you using to reproduce? On which platform? curl -V typically generates good output to include Steps To Reproduce: add details...

CVE-2026-54074

creationtimestamp| type| source ---|---|--- 2026-06-09 00:22:22+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-4936-9hrh-qqpw 2026-07-02 12:50:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo32jomd72u...

PT-2026-48331

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch adopts a fork chain whose tip is a macro block checkpoint or election, it only updates self.head but fails to update self.macro...

CVE-2026-47693

creationtimestamp| type| source ---|---|--- 2026-06-08 23:04:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3h6h-67x3-cv5x 2026-06-23 23:53:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moylvgrwcv26...

CVE-2026-52845

creationtimestamp| type| source ---|---|--- 2026-06-08 22:25:00+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-f59h-q822-g45g 2026-06-23 20:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moya4fjjjv2t 2026-07-22 23:37:07+00:00|...

CVE-2026-52844

creationtimestamp| type| source ---|---|--- 2026-06-08 22:24:46+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-qrp7-cvwr-j2c6 2026-06-23 20:05:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moy756hrqk2r 2026-06-23 23:10:58+00:00|...

CVE-2026-52846

creationtimestamp| type| source ---|---|--- 2026-06-08 22:24:11+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-vcc4-2c75-vc9v 2026-06-23 20:15:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moy7pw3teh25...

CVE-2024-0258

creationtimestamp| type| source ---|---|--- 2026-06-08 21:00:04+00:00| published-proof-of-concept| Telegram/Ntg-ofD3LMIChp1i2CdfsMqFjxuqWO46POI-bnFaiH8mdGw...

Exploit for CVE-2026-43512

CVE-2026-43512 — Apache Tomcat DIGEST Authentication Bypass...

CVE-2026-11518

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely...

CVE-2025-43537

creationtimestamp| type| source ---|---|--- 2026-06-08 15:00:06+00:00| published-proof-of-concept| Telegram/UmuNY4LfBfSUFX5R-uebZvyX1exydUHga06-YUYbEohmm0...

CVE-2008-1930

creationtimestamp| type| source ---|---|--- 2026-06-08 15:00:06+00:00| published-proof-of-concept| Telegram/UmuNY4LfBfSUFX5R-uebZvyX1exydUHga06-YUYbEohmm0 2026-08-02 11:51:57+00:00| seen| https://gist.github.com/0x9fury/f506159fd3ab6ce25a54856db53d7545...

CVE-2024-31509

creationtimestamp| type| source ---|---|--- 2026-06-08 15:00:06+00:00| published-proof-of-concept| Telegram/UmuNY4LfBfSUFX5R-uebZvyX1exydUHga06-YUYbEohmm0...

CVE-2024-33421

creationtimestamp| type| source ---|---|--- 2026-06-08 15:00:06+00:00| published-proof-of-concept| Telegram/UmuNY4LfBfSUFX5R-uebZvyX1exydUHga06-YUYbEohmm0 2026-07-12 12:00:05+00:00| seen| https://t.me/GithubRedTeam/87855 2026-07-13 00:00:44+00:00| seen| https://t.me/GithubRedTeam/87855...