1407 matches found
CVE-2025-9957
creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...
Use of a Broken or Risky Cryptographic Algorithm
Overview org.graalvm.sdk:graal-sdk is a high-performance JDK distribution designed to accelerate the execution of applications written in Java and other JVM languages along with support for JavaScript, Ruby, Python, and a number of other popular languages. Affected versions of this package are...
Cleartext Transmission of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information in the Kerberos credentialing. An attacker can intercept sensitive information by capturing unencrypted credentials during transmission. Remediation A fix was pushed into the master branch...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the Arena memory allocation. An attacker can cause unintended modification of data by providing specially crafted input that manipulates memory allocation boundaries. Remediation A fix was pushed into the...
SkillCyberPunk
Security Vulnerability Scanner A Claude Code plugin that auto...
GHSA-QF73-2HRX-XPRP
creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:25+00:00| published-proof-of-concept| Telegram/uNEbWTFRO9kglbQXnY7zSMHaUxTxgzOMmWKv2o-GlQMO0RY...
CVE-2025-24266
creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:18+00:00| seen| Telegram/P5-d6aZOqF55QElx3cS6BOd0aPe5lgIDzzkyeelTZVJswY 2026-04-02 22:15:27+00:00| seen| Telegram/zRO4yDgOkqitQ-0uPFlpuBUiTVJii3PBjh2HUkR1y964uzw...
CVE-2026-34245
creationtimestamp| type| source ---|---|--- 2026-03-27 19:13:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2t7nkm2g25 2026-03-29 15:41:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2rm7-j397-3fqg...
Assignment
Assignment Sql injection on a...
CVE-2025-15568
creationtimestamp| type| source ---|---|--- 2026-03-09 16:16:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-15568 2026-03-18 02:38:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhchfo4wgj2t...
PT-2026-23857
Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.10 Parse Server versions prior to 9.5.0-alpha.11 Description Parse Server is an open source backend deployable on Node.js infrastructures. The Google, Apple, and Facebook authentication adapters utilize JWT...
📄 WordPress AI Engine: ChatGPT Chatbot 1.9.98 Shell Upload
This is a proof of concept that demonstrates the CVE-2023-51409 vulnerability in the WordPress AI Engine plugin in a controlled, safe, and non-destructive manner. It detects the plugin, tests unauthenticated access to the vulnerable endpoint, performs safe file uploads with non-executable content...
`time_calibrator` was removed from crates.io due to malicious code
It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...
Path Traversal via Prefix Match Bypass in `_get_os_path`
This report is not public...
GHSA-P5VF-5754-X7P3 `polymarket-client-sdks` was removed from crates.io for malicious code
It appeared to be typosquatting existing crate polymarket-client-sdk sdks vs sdk and attempting to steal credentials from local files. The malicious crate had 1 version published on 2026-02-09 and had been downloaded only 33 times. There were no crates depending on this crate on crates.io. Thanks...
CVE-2026-1560
creationtimestamp| type| source ---|---|--- 2026-02-11 09:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mel4hgvx7e2a 2026-02-11 09:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116051177122807179 2026-02-11 09:59:59+00:00| seen|...
CVE-2025-9974
creationtimestamp| type| source ---|---|--- 2026-02-02 17:15:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvdvgl5k324 2026-07-09 08:53:47+00:00| seen| https://bsky.app/profile/femboyfurry.net/post/3mq7b3dqwks2b 2026-09-03 12:00:05+00:00| seen|...