Nx Console Embedded Malicious Code Vulnerability

Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory...

CVE-2026-46740

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a stats...

CVE-2026-45574

creationtimestamp| type| source ---|---|--- 2026-05-26 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xqtamf2e 2026-05-27 01:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdxxcrxo2r...

CVE-2026-5260

creationtimestamp| type| source ---|---|--- 2026-05-26 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vce4zi2k 2026-05-27 01:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsclcm7wc2c 2026-06-29 11:41:21+00:00| seen|...

CVE-2026-9170

creationtimestamp| type| source ---|---|--- 2026-05-26 19:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmromuyjiz2i 2026-05-26 19:03:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmromx6rrh2n...

CVE-2026-45728

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

GodSearch

󰓾 GodSearch v20.0 — THE SOVEREIGN 💀 Universal Exploit Sear...

EUVD-2026-31868

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

CVE-2026-45728 Algernon: Single-file mode unconditionally enables debug mode

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

CVE-2026-4480

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-26 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmreiep6t62r 2026-05-27 02:01:29+00:00| seen|...

Terminus-ai

Terminus-ai a foundation model trainthe entirety of exploit-...

CVE-2026-9543

creationtimestamp| type| source ---|---|--- 2026-05-26 12:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116640866055732013 2026-05-26 15:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmrb3wr6jl2q 2026-05-26 15:37:51+00:00| seen|...

CVE-2026-25104

creationtimestamp| type| source ---|---|--- 2026-05-26 09:00:05+00:00| seen| https://infosec.place/objects/7f14540c-11cf-4ebf-b411-9ca39a0aa39c 2026-05-26 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116640057248371306 2026-05-26 09:00:32+00:00| seen|...

CVE-2026-8047

creationtimestamp| type| source ---|---|--- 2026-05-26 07:14:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmqh22eydtb2 2026-05-26 09:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqpxqw5fe2p...

Crypt::ScryptKDF 安全漏洞

Crypt::ScryptKDF is a Perl cryptography module developed by MIK’s individual developers. It supports Scrypt-based key derivation and cryptographic hash processing functions. Versions of Crypt::ScryptKDF prior to 0.010 contained security vulnerabilities, which stemmed from the use of insecure rand...

GHSA-QX2V-QP2M-JG93

creationtimestamp| type| source ---|---|--- 2026-05-25 11:11:11+00:00| seen| https://gist.github.com/konard/0fa64e99614f285a77b6079698b5b5e3 2026-05-25 11:12:19+00:00| seen| https://gist.github.com/konard/649db61832d01e9e237bbf281b033df5 2026-05-30 02:23:48+00:00| seen|...

CVE-2026-9435

creationtimestamp| type| source ---|---|--- 2026-05-25 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116634748548269306 2026-05-25 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmobiyztm622 2026-06-22 03:46:46+00:00| seen|...

CVE-2026-5223 Crates in third party registries can override the cached source of other crates

Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The severity of the vulnerability is medium for users of third-party registries. Users of crates.io a...

CVE-2026-5223 Crates in third party registries can override the cached source of other crates

Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The severity of the vulnerability is medium for users of third-party registries. Users of crates.io a...

CVE-2026-5223

CVE-2026-5223 affects Cargo: symlinks inside crate tarballs from third-party registries can cause a malicious crate to override the cached source of another crate from the same registry. The issue is due to how symlinks are handled, enabling modification of source files after download. Impact is ...