111971 matches found
CVE-2026-57877
creationtimestamp| type| source ---|---|--- 2026-06-26 09:15:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp6ma3ng532x...
CVE-2017-4997
creationtimestamp| type| source ---|---|--- 2026-06-26 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6lrgnmto2h...
CVE-2026-39830
creationtimestamp| type| source ---|---|--- 2026-06-26 07:43:14+00:00| seen| https://gist.github.com/alon710/88958f43b0e7690b6916b9cfa5c9b9df 2026-07-15 16:40:07+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h...
CVE-2017-14507
creationtimestamp| type| source ---|---|--- 2026-06-26 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6bpkzf2u2y...
Malicious code in react-context-form-tdsss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53e75a65681ee9ea818634ddee1ed52c6c8398dbd68e2b6abca255b24aaf37 [email protected] is a dependency-confusion payload. package.json declares scripts.preinstall="node index.js", and index.js issues an...
CVE-2026-8797
creationtimestamp| type| source ---|---|--- 2026-06-26 05:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp66slptia27 2026-06-26 05:45:02+00:00| seen| https://jvn.jp/en/jp/JVN35146924 2026-06-26 06:00:28+00:00| seen|...
MAL-2026-6503 Malicious code in js-price-client-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763a44df6481ee1948ff9fda0b3997a93001acb138b7bbcba1787c3f2f8699f2 On npm install, the package's postinstall script invokes prices in dist/index.js, which resolves the consumer's project root via process.env.INITCWD?...
MAL-2026-6497 Malicious code in chai-as-synced (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be17d22b28dc53ea46085190c1f5ff11ae16ce4b80539162d68c2ad2b224158e [email protected] impersonates the pino logger: it ships pino's README, LICENSE, docs/, index.d.ts and lib/ file layout proto.js, levels.js,...
CVE-2021-47987
creationtimestamp| type| source ---|---|--- 2026-06-26 02:47:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp5wkxsk6n2h...
Malicious code in mongoose-json-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910cc6eef707ac872daeb3a527e6dd9c75044ebb178f9eb48745f5cfd4123968 helpers.js defines a createLog helper that base64-decodes a constant HASHKEY to https://www.jsonkeeper.com/b/XVHGD an anonymous JSON-paste host and...
CVE-2026-9221
creationtimestamp| type| source ---|---|--- 2026-06-26 01:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5tqjbnne2b...
CVE-2026-9220
creationtimestamp| type| source ---|---|--- 2026-06-26 01:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5thiusz52o...
CVE-2025-71333
creationtimestamp| type| source ---|---|--- 2026-06-26 01:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sz445uz2z 2026-07-01 23:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmolxzozw2o 2026-07-02 05:07:06+00:00| seen|...
CVE-2025-71336
creationtimestamp| type| source ---|---|--- 2026-06-26 01:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5st4zv2y2p 2026-07-01 23:27:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmo77pnlq2i 2026-07-02 06:07:08+00:00| seen|...
CVE-2025-71340
creationtimestamp| type| source ---|---|--- 2026-06-26 01:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sef4f3q2a...
CVE-2026-48615
Summary: CVE-2026-48615 concerns a flaw in Node.js proxy tunnel error handling that can expose proxy credentials embedded in the proxy URL via the ERR_PROXY_TUNNEL error messages. The leak is tied to error handling paths and could be captured by logs, diagnostics, or other error consumers. Affect...
CVE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...