GHSA-2XP9-VWFH-VXW4

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:07+00:00| published-proof-of-concept| Telegram/5OcvQ0Kvc7EZmNnx124YGJsJb961fNxRCYGvYNIkiajBUhEy 2026-09-04 13:52:33+00:00| seen| https://bsky.app/profile/newshoundai.bsky.social/post/3mup4ebo6nc2i...

GHSA-P293-QW3H-JR36

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:07+00:00| published-proof-of-concept| Telegram/5OcvQ0Kvc7EZmNnx124YGJsJb961fNxRCYGvYNIkiajBUhEy 2026-08-27 16:42:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168467635413172...

CVE-2026-77622

creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834 2026-08-27 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834...

GHSA-663M-7X7M-G4FW

creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834 2026-08-27 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834...

GHSA-95X5-QVVM-HMFP

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...

GHSA-MM85-Q63V-4476

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...

CVE-2026-54616

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...

MAL-2026-14538 Malicious code in spotify-url-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd the...

Malicious code in spotify-url-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd the...

CVE-2026-39902

creationtimestamp| type| source ---|---|--- 2026-08-26 05:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731 2026-08-27 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731...

CVE-2023-51794

creationtimestamp| type| source ---|---|--- 2026-08-25 22:00:04+00:00| seen| https://t.me/poheque/128 2026-08-26 00:00:08+00:00| seen| https://t.me/poheque/128...

CVE-2024-31861

creationtimestamp| type| source ---|---|--- 2026-08-25 22:00:04+00:00| seen| https://t.me/poheque/123 2026-08-26 00:00:08+00:00| seen| https://t.me/poheque/123...

CVE-2026-75604

creationtimestamp| type| source ---|---|--- 2026-08-25 22:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 01:58:09+00:00| seen|...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2026-66093

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains an OS command injection vulnerability in the Telegram bridge component . A local attacker with low privileges can exploit this to achieve code execution, privilege escalation, information disclosure, and data tampering . The CVSS 3.1 score is 7.8 (HIGH) with a l...

Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...