CVE-2026-7228

creationtimestamp| type| source ---|---|--- 2026-07-24 18:00:04+00:00| seen| Telegram/M-3cLQvPgI-qMEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw 2026-07-25 00:00:09+00:00| seen| Telegram/M-3cLQvPgI-qMEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw 2026-08-10 15:00:03+00:00| published-proof-of-concept|...

CVE-2026-16448

creationtimestamp| type| source ---|---|--- 2026-07-24 16:00:04+00:00| seen| https://t.me/bdufstecru/3342 2026-07-25 00:00:10+00:00| seen| https://t.me/bdufstecru/3342...

CVE-2019-5392

creationtimestamp| type| source ---|---|--- 2026-07-24 05:00:05+00:00| seen| Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN34 2026-07-25 00:00:11+00:00| published-proof-of-concept| Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN34...

CVE-2026-48546

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s...

CVE-2026-65971

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| https://t.me/GithubRedTeam/94876 2026-07-24 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94876 2026-07-24 01:00:03+00:00| seen| Telegram/lPm2d4VYpYEjn3m2EVnzf33SWkbqRmjBxDEhEFxEK5fDURE 2026-07-2...

MAL-2026-11031 Malicious code in govapkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...

exploitarium

Statement This repo was incomplete when published. In regar...

CVE-2026-16540

creationtimestamp| type| source ---|---|--- 2026-07-22 20:00:03+00:00| seen| Telegram/6xbzrZHKWlySmltoOKJREHJqOUlaPiDVN1mUGUuwPSWTXlo 2026-07-22 22:00:03+00:00| seen| Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg 2026-07-23 00:00:04+00:00| published-proof-of-concept|...

CVE-2018-3214

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:05+00:00| seen| Telegram/5IRIQQOTDCKuLb20SN-AA5fEEYRiSpvsdYTvkd2O8wAhw 2026-07-22 17:00:05+00:00| seen| Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ 2026-07-23 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-50055

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:04+00:00| seen| Telegram/DukmhtJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao 2026-07-22 17:00:04+00:00| seen| Telegram/SMGH074nh7Yd9wjw94ayVIJrvLGWCGzfB0CoL72YFuLp63A 2026-07-23 00:00:09+00:00| published-proof-of-concept|...

GHSA-MVH2-CRG5-V77C

creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...

Malicious code in dev-helper-bg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...

MAL-2026-10992 Malicious code in dev-helper-bg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...

Malicious code in make-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2e6560048133cc76a9e325b02b2719f89d59c500d09409bb10b6f4afb14401 On import devhelper, the package's init.py starts a daemon thread that runs decryptor.decryptandrun: it fetches an AES-GCM key from the hardcoded...

MAL-2026-10991 Malicious code in make-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2e6560048133cc76a9e325b02b2719f89d59c500d09409bb10b6f4afb14401 On import devhelper, the package's init.py starts a daemon thread that runs decryptor.decryptandrun: it fetches an AES-GCM key from the hardcoded...

CVE-2025-43391

creationtimestamp| type| source ---|---|--- 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:28+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:29+00:00| seen| https://t.me/novnow/1294032...

CVE-2025-43507

creationtimestamp| type| source ---|---|--- 2026-07-21 07:00:04+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:28+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:29+00:00| seen| https://t.me/novnow/1294032...

CVE-2025-43350

creationtimestamp| type| source ---|---|--- 2026-07-21 07:00:04+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:28+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:29+00:00| seen| https://t.me/novnow/1294032...

MAL-2026-11042 Malicious code in faust-cont (npm)

The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...

Malicious code in faust-cont (npm)

The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...