12773 matches found
EUVD-2026-10820
Craft Commerce has stored XSS in Inventory Location Name...
CVE-2025-35436
creationtimestamp| type| source ---|---|--- 2026-03-10 17:00:08+00:00| seen| https://t.me/truesecator/7979...
Malicious code in rtxnode-sass22 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a78ba8212bc3ab76a0cd01b40b2a3c0b18f319ccb29c6ccea455e9a89449a8 The package rtxnode-sass22 was found to contain malicious code. Source: ghsa-malware f55edfe6ea35e734acb3592f0b13348ef997c46497c2975855d609ee45912671...
MAL-2026-1297 Malicious code in json-merge-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16e8d9c37feb30d5a44f7a94620c3a09d182a34cd5ccc1e7c97aaf4a991ab10 The package json-merge-tool was found to contain malicious code. Source: ghsa-malware 4bb041118bdac1123bd722a9b1f99ddb6ca406f7ce80d5de344b2c36614b89e...
CVE-2005-2096
creationtimestamp| type| source ---|---|--- 2026-03-09 17:15:08+00:00| seen| https://gist.github.com/verdurin/ec4ecbbbe37c7ae1f4a79c34dbdb6793...
CVE-2026-3759
creationtimestamp| type| source ---|---|--- 2026-03-08 18:16:00+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3759...
CVE-2026-3706
creationtimestamp| type| source ---|---|--- 2026-03-08 04:16:31+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3706...
Malicious code in test-mal-npm-pkg-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9e953edc529bc6611e9adac05b4738ab0ea950259e50cb2ea1067f07d9ecf7 The package test-mal-npm-pkg-2 was found to contain malicious code. Source: ghsa-malware...
CVE-2026-28785
creationtimestamp| type| source ---|---|--- 2026-03-06 06:35:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgep3f2i5w2u...
CVE-2026-28680
creationtimestamp| type| source ---|---|--- 2026-03-06 06:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgenj6wcpm2y 2026-03-06 08:06:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu6oysy32h 2026-03-06 08:07:40+00:00| seen|...
Before You Hand over the Wheel: Evaluating LLMs for Security Incident Analysis
Security incident analysis SIA poses a major challenge for security operations centers, which must manage overwhelming alert volumes, large and diverse data sources, complex toolchains, and limited analyst expertise. These difficulties intensify because incidents evolve dynamically and require...
CVE-2025-46108
creationtimestamp| type| source ---|---|--- 2026-03-05 18:39:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdh3gxhxa2h...
CVE-2025-69411
creationtimestamp| type| source ---|---|--- 2026-03-05 17:23:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdcse2pj525 2026-04-19 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mjuu2zgek52g...
`time_calibrators` was removed from crates.io due to malicious code
The timecalibrators crate attempted to exfiltrate .env files to a server that was in turn impersonating the legitimate timeapi.io service. The malicious crate had 1 version published on 2026-03-03 approximately 3 hours before removal and had no evidence of actual downloads. There were no crates...
CVE-2026-23233
creationtimestamp| type| source ---|---|--- 2026-03-04 15:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgan2rjusw2u 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...
CVE-2026-2590
creationtimestamp| type| source ---|---|--- 2026-03-03 23:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xggot7p2e 2026-03-04 16:21:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaoup5rdc2c 2026-03-04 16:22:16+00:00| seen|...
CVE-2025-48582
creationtimestamp| type| source ---|---|--- 2026-03-03 08:19:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg5dhnc65c2s...
Malicious code in gabby-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93b414ec420fbb5e29cfc8cf33fc302e0cd870545da323e6cd3705dee0293aa The package gabby-types was found to contain malicious code. Source: ghsa-malware 07e90123732df311dcfeadaa32e06f143abc86998195ff1c94c3c908c6af8ec8 An...
Malicious code in @global-dax-ad-platform/dax-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4a8a64a2361c5b47bb7a9a178246f12b7a26f9895b760f74f013d3ebd9d702 The package @global-dax-ad-platform/dax-hooks was found to contain malicious code. Source: ghsa-malware...