1435715 matches found
Malicious code in @pablo_clueless/sniffr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
yggdrasil security update
An update is available for yggdrasil. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list yggdrasil is a system daemon that subscribes to topics on an MQTT broker a...
java-17-openjdk security update
An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...
CVE-2026-77176
creationtimestamp| type| source ---|---|--- 2026-08-20 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtap5dbe2z 2026-08-21 02:02:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtko5oxiwy2e...
offensive-one-liners
offensive-one-liners Un notebook con 110 one-liner di sicurezza offensiva per test autorizzati, CTF, bug bounty e ricerca di laboratorio. Organizzato in un unico notebook markdown con 12 sezioni. Vedi offensive-one-liners.md per il notebook completo. Argomenti trattati 1. Recon & Enumerazione 2...
EUVD-2026-63494
Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...
ROOT-APP-MAVEN-CVE-2026-2332 CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root
Root has patched CVE-2026-2332 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...
GHSA-89V8-RHWQ-HF77 asteval has a Sandbox Escape via BaseException Subclasses
Summary An attacker who can supply expressions to asteval.Interpreter.eval can raise SystemExit, KeyboardInterrupt, GeneratorExit, or BaseException from inside the sandbox. These exceptions are subclasses of BaseException but not Exception, so they bypass the except Exception: safety net in both...
CVE-2026-59307
creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...
CVE-2026-59324
creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...
CVE-2026-76760
creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtjqgwi5nb2a 2026-08-20 17:11:16+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117128943795081747...
CVE-2026-77022
creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjqfnq7sa23 2026-08-20 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtai2zz52t...
py-web-vuln-scanner
No d...
MINI-6GV7-X2V7-8X99
Bulletin has no description...
MINI-QHFQ-Q6CG-22P8
Bulletin has no description...
MINI-X6W6-G65H-76HR
Bulletin has no description...
MINI-QJRR-GP4X-R6CJ
Bulletin has no description...
MINI-MJVQ-FH83-MV97
Bulletin has no description...