112269 matches found
CVE-2026-45074
creationtimestamp| type| source ---|---|--- 2026-05-20 10:59:28+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqschhar2o 2026-07-15 09:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqofvxlidr2d 2026-07-17 15:14:05+00:00| seen|...
CVE-2026-45065
creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:23+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqokyb2i2u...
CVE-2026-35070
creationtimestamp| type| source ---|---|--- 2026-05-20 10:50:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbqczmr5u2r...
Malicious code in bricks-builder-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad643457c1104b8f118971a9ee95702f2126a16f33a4ec9dfd8ed21c43fc1eb bricks-builder-mcp is a Model Context Protocol server exposing WordPress/Bricks Builder editing tools page JSON edits, media uploads, custom CSS/JS...
MAL-2026-4500 Malicious code in bricks-builder-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad643457c1104b8f118971a9ee95702f2126a16f33a4ec9dfd8ed21c43fc1eb bricks-builder-mcp is a Model Context Protocol server exposing WordPress/Bricks Builder editing tools page JSON edits, media uploads, custom CSS/JS...
ANT-2026-ZQ8AY22X · CraftCMS · privilege-escalation
privilege-escalation high GHSA-cc7p-2j3x-x7xf Severity Claude high · Security research firm - · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-ZQ8AY22X: Privilege Escalation/Bypass through...
CVE-2025-12465
creationtimestamp| type| source ---|---|--- 2026-05-20 07:37:42+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mmbfjj3nqi2x...
MAL-2026-4471 Malicious code in @zesyn/zeditor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8e293ad2413e2e04b9ce3411d1650381143b104c40bbcb4a17c1140c9ef912 The package advertises itself as a browser rich-text editor, but on every new Zeditor... instantiation it waits 2 seconds and then POSTs end-user...
CVE-2026-9056
creationtimestamp| type| source ---|---|--- 2026-05-20 07:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbed5i7lf2i...
CVE-2026-24142
creationtimestamp| type| source ---|---|--- 2026-05-20 06:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbcanihq52e 2026-06-17 21:19:56+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojajkeljl2u...
Astra Linux – Vulnerability in Chromium
The incorrect security interface in the Loader component in Google Chrome prior to version 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar through a crafted HTML page...
Astra Linux – Vulnerability in Firefox and Thunderbird
Through a series of API calls and redirections, an alert dialog controlled by an attacker could have been displayed on another website with the victim website’s URL shown. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
Astra Linux – Vulnerability in Wireshark
Improper URL handling in Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 may allow for remote code execution through packet injection or crafted capture files...
Astra Linux – Vulnerability in Firefox and Thunderbird
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
Astra Linux – Vulnerability in Firefox and Thunderbird
The concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a “use-after-free” condition, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 102.3, Thunderbird 102.3, and Firefox 105...
Astra Linux – Vulnerability in h2database
The H2 Console before version 2.1.210 allowed remote attackers to execute arbitrary code through a jdbc:h2:mem JDBC URL that contained the IGNOREUNKNOWNSETTINGS=TRUE;FORBID CREATION=FALSE;INIT=RUNSCRIPT substring. This is a different vulnerability than CVE-2021-42392. source-iocs-preserved...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. Chromium security severity: Medium...
Astra Linux - уязвимость в cloud-init
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded URL with a local IP address. To prevent this, cloud-init’s default configurations disable platform enumeration...
Astra Linux – Vulnerability in Batik
Server-side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik version 1.16. A malicious SVG can probe user profile/data and send it directly as a parameter to a URL...
Astra Linux – Vulnerability in node-body-parser
body-parser is a Node.js body parsing middleware. body-parser version 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue has...