CVE-2026-36162

creationtimestamp| type| source ---|---|--- 2026-07-08 00:25:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3u7edrhe2g...

MAL-2026-6956 Malicious code in rio-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed72d8256a1831ef61f01d101c9b9de21db822516cb3b61d1fffd1ef7b3bb0c7 [email protected] is a dependency-confusion attack package. package.json declares preinstall: node index.js, so npm install auto-executes...

CVE-2026-58469

creationtimestamp| type| source ---|---|--- 2026-07-08 00:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ti2xc2x2e 2026-07-10 08:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbowzergg2m...

CVE-2026-59997

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...

EUVD-2026-42139

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...

CVE-2020-14412

creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3t6uosqs2d...

CVE-2026-42953

creationtimestamp| type| source ---|---|--- 2026-07-08 00:02:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sw5xhxj2k...

CVE-2026-12277

creationtimestamp| type| source ---|---|--- 2026-07-08 00:00:21+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq3ssrwtoa2e 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-15 00:00:31+00:00|...

PT-2026-56468

Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.34 Description The S3 API gateway fails to properly validate input in the X-Amz-Copy-Source header used by the CopyObject and UploadPartCopy functions. This improper validation allows the use of dot-dot path...

MiracleLinux 9 : grafana-10.2.6-22.el9_8 (AXSA:2026-1216:16)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1216:16 advisory. grafana: Grafana: Information disclosure of data-source passwords via public dashboards CVE-2026-27877 golang: internal/syscall/unix: Root.Chmod can...

CVE-2026-55633

creationtimestamp| type| source ---|---|--- 2026-07-07 23:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sn7h6ac2t...

CVE-2026-55635

creationtimestamp| type| source ---|---|--- 2026-07-07 23:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sfjtcli2z...

CVE-2026-42958

creationtimestamp| type| source ---|---|--- 2026-07-07 23:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3s6sucnj27...

CVE-2020-35789

creationtimestamp| type| source ---|---|--- 2026-07-07 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3rjakmfs23...

CVE-2026-58583

creationtimestamp| type| source ---|---|--- 2026-07-07 23:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rfwfy5v2t...

CVE-2026-53751

creationtimestamp| type| source ---|---|--- 2026-07-07 23:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rc3ggo22g...

CVE-2026-53730

creationtimestamp| type| source ---|---|--- 2026-07-07 23:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3qxurcn52i...

CVE-2026-53511

creationtimestamp| type| source ---|---|--- 2026-07-07 23:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3quv37dx2k 2026-07-11 00:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdggb7dsr2a...

CVE-2026-55408

creationtimestamp| type| source ---|---|--- 2026-07-07 23:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3qrzwq6a2z...

CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...