CVE-2026-57772

creationtimestamp| type| source ---|---|--- 2026-07-13 10:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjjbh4rv25 2026-07-13 22:07:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpbmzimm27...

CVE-2026-57375

creationtimestamp| type| source ---|---|--- 2026-07-13 10:48:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjdvgpsn27 2026-07-13 18:56:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkemc3tb22i...

CVE-2026-41041

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

PYSEC-2026-3441

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-62143

creationtimestamp| type| source ---|---|--- 2026-07-13 09:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjffc5gow2y...

CVE-2026-22099

CVE-2026-22099 affects a charging station where Bluetooth commands do not require authentication. This leads to exposure of sensitive information, potential reboot triggering, and the ability to push a firmware update URL via Bluetooth. The issue is described with high impact on confidentiality, ...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-15541

creationtimestamp| type| source ---|---|--- 2026-07-13 08:35:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbxeu6uu2e 2026-07-13 10:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjhe6icjz26...

CVE-2026-14165

creationtimestamp| type| source ---|---|--- 2026-07-13 08:29:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjblrq2px2s 2026-07-13 09:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfoycfip2w 2026-07-16 07:53:45+00:00| seen|...

MAL-2026-10426 Malicious code in chai-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ffc5e8b4e25d2d7787eb9f3bb9607114e5e4290f0afe2350499b78d5f95642 [email protected] presents itself as a Mocha reporter mirroring the legitimate eth-gas-reporter project matching author name, README, and badges, but th...

CVE-2026-12274

creationtimestamp| type| source ---|---|--- 2026-07-13 07:48:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj7cel2gg26 2026-07-14 03:15:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlaj7r33z2z...

CVE-2026-15538

creationtimestamp| type| source ---|---|--- 2026-07-13 07:44:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj73oaty727...

CVE-2026-15536

creationtimestamp| type| source ---|---|--- 2026-07-13 07:43:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6zww6kb22...

CVE-2026-11964

creationtimestamp| type| source ---|---|--- 2026-07-13 07:42:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6y7ymo52i 2026-07-13 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaedxj7k2h 2026-07-14 00:00:11+00:00| seen|...

CVE-2026-12273

creationtimestamp| type| source ---|---|--- 2026-07-13 07:41:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6vfbljy2y 2026-07-14 03:38:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlbsllbjm2c...

CVE-2026-4769

creationtimestamp| type| source ---|---|--- 2026-07-13 07:21:18+00:00| seen| https://infosec.exchange/users/certvde/statuses/116911458109125585 2026-07-13 07:54:49+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l 2026-07-13 08:30:05+00:00| seen|...

MAL-2026-10420 Malicious code in path-addon-extend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b383636076e2701a372675c281ee82463d97529ed7d8db027276aa8a8b68b966 path-addon-extend presents itself as a copy of Node's built-in path module. On module load, path.js issues an HTTPS GET to a base64-obscured URL that...

MAL-2026-10410 Malicious code in cookie-phase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bfab347de8288575bca9677b9eb7652b0024cdbffc1efebe387378c243299c The package presents itself as the popular pino logger README badges, exported module.exports.pino = middleware but its name and metadata are...