CVE-2026-41706

Spring Security: CookieRequestCache and CookieServerRequestCache store the full absolute pre-authentication URL in a browser cookie and use it as the post-login redirect target without validation. Affected versions include Spring Security 5.7.0–5.7.23; 5.8.0–5.8.25; 6.3.0–6.3.16; 6.4.0–6.4.16; 6....

CVE-2026-47928

creationtimestamp| type| source ---|---|--- 2026-06-09 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvatdnnrd2q 2026-06-10 08:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwamaibk62s 2026-06-15 16:37:06+00:00| seen|...

CVE-2026-47930

creationtimestamp| type| source ---|---|--- 2026-06-09 22:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvaketsgc2v 2026-06-10 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxh5ab625 2026-06-15 19:37:06+00:00| seen|...

CVE-2026-47932

creationtimestamp| type| source ---|---|--- 2026-06-09 22:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7gj4vo52e 2026-06-10 07:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5b3mdyo27 2026-06-15 17:07:07+00:00| seen|...

CVE-2026-47106

creationtimestamp| type| source ---|---|--- 2026-06-09 21:56:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv6u2vvte23...

CVE-2026-32856

creationtimestamp| type| source ---|---|--- 2026-06-09 21:51:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv6l4h2yn2v...

CVE-2026-11824

creationtimestamp| type| source ---|---|--- 2026-06-09 21:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv6c5utvl2h 2026-06-09 22:23:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnvadonscf2q 2026-06-18 17:10:38+00:00| seen|...

Malicious code in getd-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17328047b2ec8dce82cfbdfd5b16c8f862d51dca26b02c9801587c220a48975a On npm install, postinstall.js collects host identifiers os.hostname, os.userInfo username, os.platform, current working directory, CI environment...

MAL-2026-5466 Malicious code in getd-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17328047b2ec8dce82cfbdfd5b16c8f862d51dca26b02c9801587c220a48975a On npm install, postinstall.js collects host identifiers os.hostname, os.userInfo username, os.platform, current working directory, CI environment...

Malicious code in db-dx-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074f9125a23bf19f9f20f101c2db4888d121e6bd931fcb9933ef0e4f899c3759 The package name db-dx-connector inverts the word order of the legitimate dx-db-connector package whose own GitHub URL...

CVE-2025-67862

creationtimestamp| type| source ---|---|--- 2026-06-09 17:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuqrsjdj32e 2026-06-10 13:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6ecbbi2y...

CVE-2026-8025

creationtimestamp| type| source ---|---|--- 2026-06-09 17:39:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuqisenyh2x...

CVE-2026-49955

creationtimestamp| type| source ---|---|--- 2026-06-09 17:35:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuqb4o7py2v...

CVE-2026-28301

A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website...

CVE-2026-49848

creationtimestamp| type| source ---|---|--- 2026-06-09 17:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnup22pzwp2x...

CVE-2026-49847

creationtimestamp| type| source ---|---|--- 2026-06-09 17:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuoqjlq7b2s...

CVE-2026-34181

creationtimestamp| type| source ---|---|--- 2026-06-09 16:53:35+00:00| seen| https://mstdn.social/users/jschauma/statuses/116721189556088584 2026-06-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities20260611 2026-06-23 12:01:01+00:00| seen|...

CVE-2026-42766

creationtimestamp| type| source ---|---|--- 2026-06-09 16:53:35+00:00| seen| https://mstdn.social/users/jschauma/statuses/116721189556088584 2026-06-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities20260611 2026-06-16 16:20:37+00:00| seen|...

CVE-2026-47991 Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect Open Redirect vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation ...

Malicious code in @0xlr/sentry-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cda998358d5cfe20dc0c060f7e212e44ee41e6f369f42c15badbfdd7b796744 On npm install, this package automatically executes postinstall.js, which enumerates the entire process.env every environment variable, including CI...