MAL-2026-12212 Malicious code in statist-browser-typed-client-mb.product.payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ded83f5a0c3472f0519b9c807345fa6d92458f26cbffa730831da19cfea843 On require of the package, index.js loads bootstrap.js which selects a platform-specific asset, downloads an opaque native binary from Cloudflare...

CVE-2026-4431

creationtimestamp| type| source ---|---|--- 2026-08-05 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042081155295833 2026-08-05 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o 2026-08-05 09:20:04+00:00| seen|...

CVE-2026-12259

A flaw was found in nltk. The nltk.downloader.Downloader.downloadpackage function does not enforce SHA-256 or MD5 checksum validation before writing and extracting downloaded package bytes to disk. A remote attacker can exploit this by tampering with the package response body through a compromise...

CVE-2026-9273

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041373701599609 2026-08-05 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t 2026-08-05 07:04:04+00:00| seen|...

CVE-2026-18859

creationtimestamp| type| source ---|---|--- 2026-08-05 02:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3colvpruqxjrw 2026-08-05 02:26:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mschzbyjyi2l...

Linux Distros Unpatched Vulnerability : CVE-2026-53500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escapi...

CVE-2026-70619

creationtimestamp| type| source ---|---|--- 2026-08-04 22:09:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqncya2mxc36p 2026-08-04 23:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc4jhvpk42n...

YayTune_PoC

YayTunePoC This is a repository dedicated to technical test...

CVE-2026-70553

creationtimestamp| type| source ---|---|--- 2026-08-04 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u 2026-08-04 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t 2026-08-05 01:30:33+00:00| seen|...

CVE-2026-69110

creationtimestamp| type| source ---|---|--- 2026-08-04 16:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hx2djdxo2nr7y 2026-08-04 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbige4sax2t 2026-08-04 18:12:05+00:00| seen|...

CVE-2026-24084

creationtimestamp| type| source ---|---|--- 2026-08-04 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10 2026-08-04 17:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihzi5um2t 2026-08-04 23:13:51+00:00| seen|...

CVE-2026-67247

creationtimestamp| type| source ---|---|--- 2026-08-04 14:27:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7ureywf25 2026-08-04 14:59:23+00:00| seen| https://bsky.app/profile/potato.software/post/3msbbnaqvro2i...

CVE-2026-60007

creationtimestamp| type| source ---|---|--- 2026-08-04 13:30:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i 2026-08-04 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117037480022382500 2026-08-04 14:06:28+00:00| seen|...

CVE-2026-14175

creationtimestamp| type| source ---|---|--- 2026-08-04 10:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe 2026-08-04 11:34:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g 2026-08-04 12:00:28+00:00| seen|...

CVE-2026-18718

creationtimestamp| type| source ---|---|--- 2026-08-04 05:00:05+00:00| published-proof-of-concept| Telegram/G6YHvYYRf-37WrZNxQI96PoEQdNjc95tc6rR6-Zxn3P9ZM 2026-08-04 05:00:05+00:00| published-proof-of-concept| Telegram/KFeguXINVuTNqz8DQtQvXbwdcsarR0hPsZej5KOptLSOJk 2026-08-05 00:00:55+00:00|...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the compiler's i18n metadata collection path, which lets event-handler attributes be marked translatable with i18n-on such as i18n-onerror, bypassing the validation that normally blocks binding to event-handl...

CVE-2026-8763

creationtimestamp| type| source ---|---|--- 2026-08-03 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030049213840403 2026-08-03 06:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms5t2wluuw2j 2026-08-03 20:58:03+00:00| seen|...

CVE-2026-6695

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA Paint Shop Pro Array image file. This vulnerability, a heap-based out-of-bounds write in the decodelzss function of the PAA file format plugin, allows data to be written beyond t...

CVE-2026-67357

creationtimestamp| type| source ---|---|--- 2026-08-02 15:34:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4coplchp25 2026-08-02 15:34:50+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4coppunl23...

CVE-2026-68580

creationtimestamp| type| source ---|---|--- 2026-08-02 14:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms45imklnk2n 2026-08-02 14:14:32+00:00| seen| https://bsky.app/profile/potato.software/post/3ms4675yian23 2026-08-03 04:44:06+00:00| seen|...