CVE-2026-60575

...

Malicious code in dreamgen (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of dreamgen were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

EUVD-2026-2172

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-205170

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to other config, if the hardware does not support the -pullup callback, or the hardware encounters a low probability fault...

CVE-2020-9365

creationtimestamp| type| source ---|---|--- 2025-10-07 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzlednda2a...

EUVD-2025-30945

Malicious code in bioql PyPI...

CVE-2023-22514

creationtimestamp| type| source ---|---|--- 2023-10-24 18:10:06+00:00| exploited| https://t.me/truesecator/5001 2025-03-18 17:48:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7943...

CVE-2022-42175

creationtimestamp| type| source ---|---|--- 2023-07-05 07:19:54+00:00| seen| https://t.me/cibsecurity/65944...

CVE-2020-28634

creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:56+00:00| seen| https://t.me/cibsecurity/41014...

CVE-2020-7596

creationtimestamp| type| source ---|---|--- 2020-01-26 12:37:41+00:00| seen| https://t.me/cveNotify/399...

CVE-2025-34766

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-22928

...