5203 matches found
MAL-2026-10273 Malicious code in abuden24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb51631494082c47eae9693ef57def77cbb5e4ecef742b0e1cf5ac6f41b4573f The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10350 Malicious code in nottuff24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d91c65c2ae847d5e741575bbc60ac69c0d2aca4973888c6ce2fc85daac3e30 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10346 Malicious code in nottuff2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2505cd60f257bd1c69e2bd6ccbaa987e2045a453adb8c0e1c529c34afade95c7 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10310 Malicious code in imillegal5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f821da7c50910d456dfcf5a26ae1afd56a7ec95836a16f570edb014d02a6608 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10369 Malicious code in ratelimitsucks4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14055b6363b7ffa1d3f701928a081a38642b2c80182d5b744b5def44fe737737 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
GHSA-8MG2-6588-R4HW
creationtimestamp| type| source ---|---|--- 2026-07-12 09:01:47+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229 2026-07-13 00:00:48+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229...
CVE-2026-15286
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
EUVD-2026-42795
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
CVE-2026-15286
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
CVE-2026-15286
The CVE-2026-15286 entry concerns the Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress. Affected component: a misconfigured capability check on the get_items_permission_check function within the process_pattern REST API endpoint, which affects all versions up to...
CVE-2026-15286 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publication
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
CVE-2026-52777
creationtimestamp| type| source ---|---|--- 2026-07-09 21:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqame5dcxj25 2026-07-09 22:35:05+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9369-69wj-7m2f...
CVE-2026-54777
CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffic when an attacker races NamedPipeListen...
PT-2026-56531
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5 Description A diagnostic action on the LDAP Source API fails to enforce the object-level read-authorization filter applied to the rest of the API. This allows any party...
PT-2026-56532
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.6 authentik versions prior to 2026.5.5 Description An inbound SAML Source configured with non-default USERNAME LINK or EMAIL LINK user-matching modes interprets XML comments within a NameID differently than t...
GHSA-F74W-488G-8X5R
creationtimestamp| type| source ---|---|--- 2026-07-07 01:11:51+00:00| seen| https://gist.github.com/alon710/8f065297b373724c4dd370345047c8bb...
CVE-2026-14791
creationtimestamp| type| source ---|---|--- 2026-07-06 04:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpx7negsoo23 2026-07-08 02:52:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq44fxergo2i...
CVE-2026-54887
creationtimestamp| type| source ---|---|--- 2026-07-03 08:41:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5l6hjry2b 2026-07-03 09:33:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaikpjzt2n 2026-07-03 10:37:19+00:00| seen|...
CVE-2026-13376
creationtimestamp| type| source ---|---|--- 2026-07-03 02:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppivbz7ib2s 2026-07-03 19:00:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra7gzx7t23...