CVE-2026-14077

creationtimestamp| type| source ---|---|--- 2026-07-02 01:45:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvviwwfd27 2026-07-02 07:51:38+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:45:13+00:00| seen|...

CVE-2026-5142

creationtimestamp| type| source ---|---|--- 2026-07-02 00:35:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmry7olzh2y 2026-07-02 01:57:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwlmecux27 2026-07-02 08:10:19+00:00| seen|...

PT-2026-54949

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp load more revs AJAX action in versions up to, and including, 12.7.2. The parameter is read via $ POST'notinstring' and passed through sanitize text field — which strips HTML an...

PT-2026-55303

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 6.7 Description Predictable session identifiers can lead to session hijacking. The issue occurs because HTTP session identifiers in the src/HTTPserver.cpp file use weak time-seeded pseudo-randomness during session...

PT-2026-55271

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 25.3 through 29.0.2 Erlang/OTP versions 28.x prior to 28.5.0.3 Erlang/OTP versions 27.x prior to 27.3.4.14 ssl versions 10.9 through 11.7.2 ssl versions 11.6.x prior to 11.6.0.3 ssl versions 11.2.x prior to 11.2.12.10...

CVE-2026-38968

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

CVE-2026-38968: Predictable from Observable State

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

CVE-2026-53351

creationtimestamp| type| source ---|---|--- 2026-07-01 22:46:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvv3owd2d 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-53340

creationtimestamp| type| source ---|---|--- 2026-07-01 22:26:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkrk2x5l2r 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-14114

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmitplxfe2y 2026-07-02 01:39:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvk3ipal2q 2026-07-02 08:17:28+00:00| seen|...

CVE-2026-14106

creationtimestamp| type| source ---|---|--- 2026-07-01 21:50:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmiruavlx24 2026-07-02 08:16:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:25+00:00| seen|...

CVE-2026-34111

creationtimestamp| type| source ---|---|--- 2026-07-01 21:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmiglyzbt2k 2026-07-02 04:43:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7tpyc5c2y 2026-07-02 09:28:31+00:00| seen|...

CVE-2026-13999

creationtimestamp| type| source ---|---|--- 2026-07-01 21:17:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgwfxuab26 2026-07-02 07:48:50+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:21:14+00:00| seen|...

CVE-2026-14002

creationtimestamp| type| source ---|---|--- 2026-07-01 21:15:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgsnjran2y 2026-07-01 21:15:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgsniedp23 2026-07-02 07:48:56+00:00| seen|...

MAL-2026-6718 Malicious code in test-pkg-yarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...

Malicious code in test-pkg-yarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...

MAL-2026-6717 Malicious code in test-pkg-x0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0014944456f668a25fa484bf7cb5f36a7128d6a585b86d9294d8d49b23049a Package declares scripts.postinstall pointing at shim.js, a script that runs unconditionally on npm install. shim.js branches on uname -s...

MAL-2026-6714 Malicious code in polymarket-trading-developer-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ffc35841039a7a95d8b5590db211f34b662975513f3a054b8be282f0858c99 The package's postinstall lifecycle script performs install-time remote code execution. It reads a bundle URL from a JSON config hosted at...

Malicious code in polymarket-trading-developer-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ffc35841039a7a95d8b5590db211f34b662975513f3a054b8be282f0858c99 The package's postinstall lifecycle script performs install-time remote code execution. It reads a bundle URL from a JSON config hosted at...

MAL-2026-6712 Malicious code in polymarket-risk-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bfddce038bb64117d6850bb2977f8cee17704212e12e6214fb495b9d4cee79 On npm install, the package's postinstall script reads a config URL from package.json's homepage field...