12773 matches found
CVE-2018-7408
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...
CVE-2026-45761
creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...
CVE-2026-22314
creationtimestamp| type| source ---|---|--- 2026-05-20 12:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbwm7vwyn2o...
CVE-2026-47783
creationtimestamp| type| source ---|---|--- 2026-05-20 11:52:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmbtqvnqvt2k 2026-05-21 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmfllxhfro2s...
CVE-2026-24163
creationtimestamp| type| source ---|---|--- 2026-05-20 06:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbcxoa22y2i 2026-06-17 21:24:41+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojas22f2x2t...
CVE-2026-44791
creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-24 17:03:17+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2fh36qon2j...
MAL-2026-4168 Malicious code in chai-as-vec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2944243ad1e093008da195dce566e63cce55ebe7fe0f5eb98ad71ffaddb81d The package chai-as-vec was found to contain malicious code. Source: ghsa-malware 881a1aaf4a8b84da34d86f9eae83889cf848ee573bc5b1b0323a75edf9789e86 An...
CVE-2026-31072
creationtimestamp| type| source ---|---|--- 2026-05-19 07:40:32+00:00| seen| https://gist.github.com/nedlir/11fb77f35a59cbba73392a086b02a9c6 2026-05-19 20:07:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mma6xovmna2v...
CVE-2026-8838
creationtimestamp| type| source ---|---|--- 2026-05-19 00:00:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116598298841823637 2026-05-19 14:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/84826 2026-05-19 15:00:15+00:00| published-proof-of-concept|...
PT-2026-42030
Name of the Vulnerable Software and Affected Versions OpenMcdf versions prior to 3.1.4 Description A denial of service occurs when processing a specially crafted Compound File Binary CFB file. The issue resides in the BST name-lookup loop within the DirectoryTree.TryGetDirectoryEntry function,...
MAL-2026-3994 Malicious code in @antv/g6-plugins (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/g-canvas (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
CVE-2026-4881
creationtimestamp| type| source ---|---|--- 2026-05-18 23:56:50+00:00| seen| https://gist.github.com/Neclode/e868c6230e0f67710aaf558313f9fa67 2026-06-04 10:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhnymzsy2x 2026-07-11 04:50:46+00:00| seen|...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...
CVE-2026-42640
creationtimestamp| type| source ---|---|--- 2026-05-18 08:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4hopjxot2s...
CVE-2026-8772
creationtimestamp| type| source ---|---|--- 2026-05-18 02:37:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3tsau5rf2e...
CVE-2026-38698
creationtimestamp| type| source ---|---|--- 2026-05-17 21:00:04+00:00| seen| Telegram/FMujIRa9WJxg8stLSMyK9s8hezzOoxBzO2QROQaixpXJv8...
Grafana Says It Rejected Ransom Demand After Source Code Theft
Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected...
CVE-2026-43907
creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlzyqsnspt2l 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...