Lucene search
+L

11074 matches found

OSV
OSV
added 2026/06/17 1:19 p.m.5 views

DEBIAN-CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.4AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/17 1:19 p.m.12 views

CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS0.00207EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/17 1:19 p.m.4 views

CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS6.2AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.9 views

MAL-2026-6158 Malicious code in enzyme-optimization-bluetooth (npm)

The npm package enzyme-optimization-bluetooth published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6153 Malicious code in datapersistence-profiling (npm)

The npm package datapersistence-profiling published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6164 Malicious code in interaction-photos-infinitescroll (npm)

The npm package interaction-photos-infinitescroll published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.8 views

MAL-2026-6166 Malicious code in jest-macos (npm)

The npm package jest-macos published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.6 views

MAL-2026-6172 Malicious code in platformspecific-webgl (npm)

The npm package platformspecific-webgl published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.8 views

MAL-2026-6145 Malicious code in accordion-animationtiming-authorization (npm)

The npm package accordion-animationtiming-authorization published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component moun...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6147 Malicious code in analytics-readability-gestures (npm)

The npm package analytics-readability-gestures published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6163 Malicious code in framerate-interaction-permissions (npm)

The npm package framerate-interaction-permissions published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6146 Malicious code in actionbars-infinitescroll-searchbar (npm)

The npm package actionbars-infinitescroll-searchbar published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.9 views

MAL-2026-6159 Malicious code in expandingcards-socket-virtualization (npm)

The npm package expandingcards-socket-virtualization published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount i...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.9 views

MAL-2026-6178 Malicious code in streaming-downloads (npm)

The npm package streaming-downloads published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.6 views

MAL-2026-6174 Malicious code in pushnotifications-gesturerecognition (npm)

The npm package pushnotifications-gesturerecognition published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount i...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.8 views

MAL-2026-6152 Malicious code in custom-save-area-block (npm)

The npm package custom-save-area-block published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.10 views

MAL-2026-6167 Malicious code in lazyloading-haptics (npm)

The npm package lazyloading-haptics published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.4AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.8 views

MAL-2026-6181 Malicious code in virtualization-compression-collapse (npm)

The npm package virtualization-compression-collapse published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6180 Malicious code in userinterface-machinelearning (npm)

The npm package userinterface-machinelearning published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/17 12:0 p.m.7 views

MAL-2026-6176 Malicious code in request-tracking-sqlite (npm)

The npm package request-tracking-sqlite published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder