Sign in Get started free

loading

Threats that need attention this week · Live · InfraStack

Sign in Get started free

Live· 656 threats · last 7 days· last check 2026-11-04 06:00 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

This week

Most severe in needs attention

CAMPAIGNNO CVE YET

EXPLOITED IN THE WILD

Attackers exploit unauthenticated Node-RED editors (CVE-2026-58115, Siemens SIMATIC IoT2050) to deploy a Linux bot and command webshells (VulnCheck)Node-RED1 talking

SUPPLY CHAINNO CVE YET

EXPLOITED IN THE WILD

cPGuard server security software update channel hijacked: attackers pushed a backdoor that steals root password hashes, SSH keys and cloud tokens (OPSSHIELD confirms)cPGuard2 talking

CAMPAIGNNO CVE YET

EXPLOITED IN THE WILD

Attackers log in as admin on outdated BTCPay Server instances (2.4.1 and older) and drain their hot walletsBTCPay Server

BREACHNO CVE YET

Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being usedNorthflank3 talking

Wednesday, Nov 4

CRITICAL9.1better-auth Expo plugin: forged login state enables account takeoverPackage2026-11-03 21:37 UTCby NVD–WHAT TO DO CRITICAL10.0Linksys E5600 router: login handler flaw allows remote authentication bypassE5600Infrastructure2026-11-04 03:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0Qihoo 360 M5 router: hard-coded credentials in boot script360 Whole Home Router M5Infrastructure2026-11-04 02:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0Qihoo 360 D603-2 and D706 routers: remote command injection via host argumentQihoo 360 D603-2Infrastructure2026-11-04 02:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9TOTOLINK A950RG router: remote stack overflow in wireless config handlerA950RGInfrastructure2026-11-04 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9TOTOLINK A950RG router: remote stack overflow via Wi-Fi multi-SSID settingsInfrastructure2026-11-04 01:17 UTCby NVD–WHAT TO DO CRITICAL9.9TOTOLINK A950RG router: remote stack overflow in MAC filter handlerA950RG firmwareInfrastructure2026-11-04 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0Qihoo 360 router firmware: signature check flaw allows unsigned firmware installsInfrastructure2026-11-04 01:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in yzx-npm (npm)yzx-npmPackage2026-11-04 01:17 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in mocha-ui-themes (npm)mocha-ui-themesPackage2026-11-04 01:03 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-form-core (npm)tailwind-form-corePackage2026-11-04 00:26 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in react-contact-forms (npm)react-contact-formsPackage2026-11-04 00:26 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-input-kit (npm)tailwind-input-kitPackage2026-11-04 00:24 UTCby osv-malicious–UNINSTALL CRITICAL9.8Quest Foglight for Databases: unauthenticated remote code execution via ForgeMBeanServerSupportFoglight for DatabasesOther2026-11-04 00:17 UTCby InfraStack Analyst–FIX 8.3 CRITICAL9.8Quest Foglight for Databases: unauthenticated file path flaw allows remote code executionFoglight for DatabasesVendor2026-11-04 00:17 UTCby InfraStack Analyst–FIX 8.3 CRITICAL9.8Quest Foglight for Databases: unauthenticated remote code execution as SYSTEM via deserializationFoglight for DatabasesOther2026-11-04 00:17 UTCby InfraStack Analyst–FIX 8.3 CRITICAL9.9TOTOLINK A950RG router: stack overflow in setup wizard lets remote attackers inA950RG firmwareInfrastructure2026-11-04 00:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUM4.3RAGFlow: Text-to-SQL retrieval flaw lets remote users bypass authorizationragflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–WHAT TO DO HIGH8.2MLflow: get-artifacts endpoint lets remote users read server-side datamlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.17.0 HIGH7.8MLflow: crafted pickle evaluation artifact lets remote attacker run codemlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.13.0 MEDIUM5.4MLflow: logged-in users can read and cancel other users' jobs on the tracking server (basic-auth)mlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.16.0 MEDIUM6.3MLflow Tracking Server: missing authorization lets users reach protected resourcesmlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.16.0 MEDIUM5.4MLflow Tracking Server: missing authorization lets authenticated users escalate privilegesmlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.16.0 HIGH7.8MLflow: SHAP explainer loading lets a crafted file run codemlflowAI agents & MCP2026-11-04 00:17 UTCby InfraStack Analyst–FIX 3.17.0 CRITICAL9.8NoMachine nxwebrunner web service: heap overflow lets remote attackers run codeNoMachineOther2026-11-04 00:17 UTCby InfraStack Analyst–FIX 10.1.7 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in jito-bundle-jito-tip7 (npm)jito-bundle-jito-tip7Package2026-11-04 00:05 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in jito-bundle-jitotip (npm)jito-bundle-jitotipPackage2026-11-04 00:05 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in jito-bundle-solana (npm)jito-bundle-solanaPackage2026-11-04 00:05 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @touchkey0111/jito-bundle (npm)@touchkey0111/jito-bundlePackage2026-11-04 00:05 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in jito-bundle-tip-7 (npm)jito-bundle-tip-7Package2026-11-04 00:05 UTCby osv-malicious–UNINSTALL

Tuesday, Nov 3

CRITICAL9.8Emerson Ovation: unauthenticated protocols let attackers change controller configurationOvationInfrastructure2026-11-03 23:17 UTCby InfraStack Analyst–FIX 3.8.0 Feature Pack 3 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in arbkit (npm)arbkitPackage2026-11-03 22:56 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ln9qw38745g (PyPI)ln9qw38745gPackage2026-11-03 22:54 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in protecteda (PyPI)protectedaPackage2026-11-03 22:50 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in txnforge (npm)txnforgePackage2026-11-03 22:31 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in print-hello-world-test-temp (npm)print-hello-world-test-tempPackage2026-11-03 22:31 UTCby osv-malicious–UNINSTALL CRITICAL9.1NetApp StorageGRID: authentication bypass lets attackers with Grid Network access make unauthorized requestsInfrastructure2026-11-03 22:19 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.6Chrome on Android: WebGL memory write lets crafted page run codeOther2026-11-03 22:19 UTCby NVD–WHAT TO DO CRITICAL9.2Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before…Package2026-11-03 21:11 UTCby Vendor & lab pages–WHAT TO DO MEDIUMCAMPAIGNFUNDS STOLENAtlasCorePolyFuckedFake Polymarket and Kalshi prediction-market sites, promoted by AI-made influencers on Instagram, take crypto deposits and ID documents and never let victims withdraw (Recorded Future)PolymarketOther2026-11-03by InfraStack Analyst–WHAT TO DO HIGHCAMPAIGNDATA EXPOSEDAttackers sign in to Microsoft Entra ID and Azure DevOps as app service principals using stolen client secrets, hitting MSPs and their customer tenants to loot Key Vault and files (Todyl, Huntress)Microsoft Entra IDInfrastructure2026-11-03by InfraStack Analyst–WHAT TO DO CRITICAL9.8Etrel INCH AC charger web panel ships with hard-coded admin loginInfrastructure2026-11-03 22:17 UTCby NVD–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in zyto (PyPI)zytoPackage2026-11-03 21:46 UTCby osv-malicious–UNINSTALL CRITICAL9.1node-opcua: namespace access defaults ignored, anonymous clients can write variablesPackage2026-10-23 05:49 UTCby NVD–WHAT TO DO CRITICAL9.0Dell Wyse Management Suite: cross-site scripting lets a low-privilege user inject scriptsVendor2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome on Android: WebGL use-after-free lets a crafted page run codeOther2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome on Android: Dawn buffer overflow lets a web page run codeRuntime2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome on Android: memory bug in ANGLE lets crafted page run codeRuntime2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome: use-after-free in Geometry lets crafted web page run codeRuntime2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome: Dawn buffer overflow lets a crafted web page run codeRuntime2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome: use-after-free in Core lets a crafted page run codeRuntime2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICALNOT SCOREDChrome: use-after-free in Prerender lets a web page run codePackage2026-11-03 21:17 UTCby NVD–WHAT TO DO CRITICAL9.0Puppet Server and OpenVox: certificate name matching lets a client impersonate other nodesopenvox-serverRuntime2026-11-03 21:17 UTCby InfraStack Analyst–FIX 8.18.0 CRITICAL9.4Puppet Server: crafted report lets an agent certificate run code on the serverpuppet-coreInfrastructure2026-11-03 21:17 UTCby InfraStack Analyst–FIX 9.1.3 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in hijuko-pilara (PyPI)hijuko-pilaraPackage2026-11-03 20:19 UTCby osv-malicious–UNINSTALL CRITICAL9.8HPE Networking Fabric Composer: hardcoded passwords give remote attackers admin accessInfrastructure2026-11-03 20:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.6HPE Fabric Composer: authentication bypass in operating system allows code executionInfrastructure2026-11-03 20:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.6HPE Networking Fabric Composer: unauthenticated adjacent attacker can run codeInfrastructure2026-11-03 20:18 UTCby InfraStack Analyst–WHAT TO DO HIGH7.7Claude Code: Edit tool symlink race lets sandboxed code overwrite files outside workspaceAI agents & MCP2026-10-26 11:43 UTCby NVD–WHAT TO DO HIGH7.5Claude Desktop on Windows runs a planted git.exe from opened repositoriesAI agents & MCP2026-10-13 12:24 UTCby NVD–WHAT TO DO CRITICAL9.3fastapi-code-generator: crafted OpenAPI response key injects Python codePackage2026-07-01 09:46 UTCby NVD–WHAT TO DO CRITICAL9.3fastapi-code-generator: OpenAPI summaries inject Python code into generated handlersPackage2026-07-01 09:45 UTCby NVD–WHAT TO DO CRITICAL9.3fastapi-code-generator: crafted OpenAPI path injects Python code into generated appsPackage2026-07-01 09:45 UTCby NVD–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in filipt (PyPI)filiptPackage2026-11-03 19:28 UTCby osv-malicious–UNINSTALL CRITICAL9.2Docker Desktop on Windows: container escapes seccomp to reach host filesDocker Desktop (WSL 2 backend, Windows, x86-64)Runtime2026-11-03 19:17 UTCby InfraStack Analyst–FIX 4.98.0 with WSL 3.0.3 CRITICAL9.8Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access@enspirit/eloPackage2026-10-30 17:22 UTCby GitHub Advisories–FIX 1.0.1 CRITICAL9.8Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels@enspirit/eloPackage2026-10-30 17:23 UTCby GitHub Advisories–FIX 1.0.1 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 5df897 (npm)5df897Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in sgj0kx (npm)sgj0kxPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in y0syoh (npm)y0syohPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in wxmzfq (npm)wxmzfqPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in j4pe0w (npm)j4pe0wPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 7un7kh (npm)7un7khPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ll3zea (npm)ll3zeaPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in s775oe (npm)s775oePackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 2tyegs (npm)2tyegsPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in t6unrv (npm)t6unrvPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 3zqth8 (npm)3zqth8Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in gvmabc (npm)gvmabcPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ru0z83 (npm)ru0z83Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in g3ypjg (npm)g3ypjgPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in v36sl2 (npm)v36sl2Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in wyrj3i (npm)wyrj3iPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in jd7ijw (npm)jd7ijwPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in rtvu6h (npm)rtvu6hPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in kojs0k (npm)kojs0kPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ib3rwn (npm)ib3rwnPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in qxjf8r (npm)qxjf8rPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bznio5 (npm)bznio5Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in wolce9 (npm)wolce9Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in code-resour-ces-new-app-cloner-premium-9upyk2 (npm)code-resour-ces-new-app-cloner-premium-9upyk2Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in u0bh1f (npm)u0bh1fPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in more-resour-ces-gen-tailed-demon-slayer-h-a-c-k-gen-erat-or-yas2jz (npm)more-resour-ces-gen-tailed-demon-slayer-h-a-c-k-gen-erat-or-yas2jzPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in gene-rator-new-rope-hero-h-a-c-k-gen-erat-or-azkrvc (npm)gene-rator-new-rope-hero-h-a-c-k-gen-erat-or-azkrvcPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 9ct8bi (npm)9ct8biPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 1b67v5 (npm)1b67v5Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in winjb6 (npm)winjb6Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in updated-gen-erator-producer-h-a-c-k-gen-erat-or-g8pi55 (npm)updated-gen-erator-producer-h-a-c-k-gen-erat-or-g8pi55Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in more-resour-ces-gen-daylio-h-a-c-k-gen-erat-or-qvi0r6 (npm)more-resour-ces-gen-daylio-h-a-c-k-gen-erat-or-qvi0r6Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in new-code-unlim-ited-jurassic-world-m-od-f-r-e-e-wuo1ky (npm)new-code-unlim-ited-jurassic-world-m-od-f-r-e-e-wuo1kyPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in real-gen-erator-one-shade-h-a-c-k-gen-erat-or-8ks294 (npm)real-gen-erator-one-shade-h-a-c-k-gen-erat-or-8ks294Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in updated-gen-erator-rainbow-six-mobile-h-a-c-k-gen-erat-or-1179lh (npm)updated-gen-erator-rainbow-six-mobile-h-a-c-k-gen-erat-or-1179lhPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in yhk9j0 (npm)yhk9j0Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in updated-today-gen-dr-parking-4-h-a-c-k-gen-erat-or-hmdcsa (npm)updated-today-gen-dr-parking-4-h-a-c-k-gen-erat-or-hmdcsaPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in new-code-unlim-ited-my-time-at-portia-h-a-c-k-gen-erat-or-i477p4 (npm)new-code-unlim-ited-my-time-at-portia-h-a-c-k-gen-erat-or-i477p4Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in k7nhgj (npm)k7nhgjPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in j5ugvu (npm)j5ugvuPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in more-resour-ces-gen-disney-mirrorverse-h-a-c-k-gen-erat-or-gulnxl (npm)more-resour-ces-gen-disney-mirrorverse-h-a-c-k-gen-erat-or-gulnxlPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in gene-rator-new-hearthstone-h-a-c-k-gen-erat-or-9wy4b5 (npm)gene-rator-new-hearthstone-h-a-c-k-gen-erat-or-9wy4b5Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8z (npm)working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8zPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in more-resour-ces-gen-stickman-legends-f-r-e-e-h-a-c-k-gen-erat-or-bv4n15 (npm)more-resour-ces-gen-stickman-legends-f-r-e-e-h-a-c-k-gen-erat-or-bv4n15Package2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in updated-today-gen-photo-lab-pro-h-a-c-k-gen-erat-or-ofgpju (npm)updated-today-gen-photo-lab-pro-h-a-c-k-gen-erat-or-ofgpjuPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in latest-update-my-talking-angela-h-a-c-k-gen-erat-or-q8z42f (npm)latest-update-my-talking-angela-h-a-c-k-gen-erat-or-q8z42fPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in l52upm (npm)l52upmPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in updated-gen-erator-carx-drift-racing-h-a-c-k-gen-erat-or-tkfm7v (npm)updated-gen-erator-carx-drift-racing-h-a-c-k-gen-erat-or-tkfm7vPackage2026-11-03 17:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @shein-risk/si_verify (npm)@shein-risk/si_verifyPackage2026-11-03 17:26 UTCby osv-malicious–UNINSTALL CRITICAL9.9SolarWinds Dameware: command injection lets an authenticated user compromise remote hostsDamewareOther2026-11-03 17:18 UTCby InfraStack Analyst–FIX 2026.3.1 MEDIUM4.2Lightdash: authorization bypass lets users alter dashboards in other projectsAI agents & MCP2026-11-03 16:35 UTCby NVD–WHAT TO DO HIGHCAMPAIGNDATA EXPOSEDGitBook breached: attackers got into parts of GitBook's infrastructure on 2 Nov; docs sites and editor taken offline, customer data impact unknownGitBookVendor2026-11-02 17:00 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1SonicWall GMS: unauthenticated network attacker can read internal filesSonicWall GMSInfrastructure2026-11-03 17:17 UTCby InfraStack Analyst–WHAT TO DO LOWNOT SCOREDArc has unauthenticated application log disclosure via `/api/v1/logs`github.com/basekick-labs/arcAI agents & MCP2026-11-03 16:29 UTCby GitHub Advisories–FIX 0.0.0-20260615165136-bb7d9761ad98 HIGH8.2WPPConnect Server: missing auth lets anyone send WhatsApp messageswppconnect-serverAI agents & MCP2026-11-03 16:17 UTCby InfraStack Analyst–WHAT TO DO HIGH7.7Label Studio: image export lets logged-in users reach internal URLs and steal tokensAI agents & MCP2026-09-29 14:48 UTCby NVD–WHAT TO DO MEDIUM5.1SQLBot: path traversal in importToDb lets admins read server filesAI agents & MCP2026-11-03 16:17 UTCby NVD–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @vanzxy/nusa (npm)@vanzxy/nusaPackage2026-11-03 15:23 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @vanzxy/baileys (npm)@vanzxy/baileysPackage2026-11-03 15:23 UTCby osv-malicious–UNINSTALL HIGH8.8AzuraCast: station users can run OS commands through StereoTool settingsazuracast/azuracastAI agents & MCP2026-10-18 15:44 UTCby InfraStack Analyst–WHAT TO DO MEDIUM4.8SurrealDB: SSRF via IPv6 transition addresses reaches internal hostsAI agents & MCP2026-10-19 08:51 UTCby NVD–WHAT TO DO MEDIUM5.3SurrealDB: port-specific network deny rules can be bypassed, enabling internal SSRFAI agents & MCP2026-10-19 08:51 UTCby NVD–WHAT TO DO MEDIUM5.1SurrealDB: JWKS URLs bypass deny-net rules, enabling internal server-side requestsAI agents & MCP2026-10-19 08:51 UTCby NVD–WHAT TO DO HIGH7.1SurrealDB: nested values crash the database server for all tenantsAI agents & MCP2026-10-19 08:51 UTCby NVD–WHAT TO DO HIGH8.6SurrealDB: MCP session fingerprint lets one user hijack another's sessionAI agents & MCP2026-10-19 08:51 UTCby NVD–WHAT TO DO CRITICAL9.1FreeRDP: certificate check accepts wrong server names, enabling interception of RDP sessionsPackage2026-10-19 12:13 UTCby NVD–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @lynnidoffc/libsignal-node (npm)@lynnidoffc/libsignal-nodePackage2026-11-03 15:17 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @lynnidoffc/baileys (npm)@lynnidoffc/baileysPackage2026-11-03 15:17 UTCby osv-malicious–UNINSTALL CRITICALINCIDENTSentry: Sentry.io dashboard and API is downSentryVendor2026-11-03 14:57 UTCby status page–WHAT TO DO HIGHCAMPAIGNEXPLOITED3AMThreeAM3AM ransomware affiliate uses an AI agent loop to steal Veeam backup credentials, add rogue domain admins and link separate AD domains before encrypting (Bitdefender)Veeam Backup & ReplicationOther2026-11-03by InfraStack Analyst–WHAT TO DO HIGH7.1Instatic: AI/MCP read tools expose other users' private draftsAI agents & MCP2026-11-03 10:04 UTCby NVD–WHAT TO DO HIGHCAMPAIGNDATA EXPOSEDLLMjackingUNC6993LLMjacking crews (UNC6993, Jet Night) use stolen cloud keys and tokens to run up AWS Bedrock, Gemini and Azure OpenAI bills of $100K+/day and resell the access (Google GTIG)AWS Bedrock3 talkingInfrastructure2026-10-30by InfraStack Analyst3talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in nulio-connector (npm)nulio-connectorPackage2026-11-03 12:27 UTCby osv-malicious–UNINSTALL CRITICALCAMPAIGNEXPLOITEDAttackers exploit unauthenticated Node-RED editors (CVE-2026-58115, Siemens SIMATIC IoT2050) to deploy a Linux bot and command webshells (VulnCheck)Node-RED1 talkingInfrastructure2026-11-02by InfraStack Analyst1talkingFIX V4.3.4.1 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in blitzstrike (npm)blitzstrikePackage2026-11-03 11:25 UTCby osv-malicious–UNINSTALL CRITICAL9.2Eclipse Mnestix Browser: unauthenticated attacker can steal backend API keysPackage2026-11-03 10:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-moss-wallpaper (npm)dsh-moss-wallpaperPackage2026-11-03 10:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vibes-plug (npm)vibes-plugPackage2026-11-03 09:21 UTCby osv-malicious–UNINSTALL CRITICAL9.2AxxonSoft Axxon One: default admin password lets remote attackers log inVendor2026-11-03 09:17 UTCby EPSS–WHAT TO DO CRITICAL9.1ManageEngine Log360 and EventLog Analyzer builds 13025 to 13061: improper access control allows unauthorized access (fixed in 13062)EventLog AnalyzerInfrastructure2026-11-03 08:17 UTCby InfraStack Analyst–FIX 13062 CRITICAL9.8WSO2 API Manager: self-registered users can reach admin System REST APIs when Identity Server is Resident Key ManagerWSO2 API ManagerInfrastructure2026-11-03 08:17 UTCby InfraStack Analyst–FIX latest U2 update level + updated IS connector MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-moss-console (npm)dsh-moss-consolePackage2026-11-03 07:25 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in luna-baileys (npm)luna-baileysPackage2026-11-03 06:46 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in service-roles-registry (npm)service-roles-registryPackage2026-11-03 06:29 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in paidwithtab (npm)paidwithtabPackage2026-11-03 06:27 UTCby osv-malicious–UNINSTALL CRITICAL9.1BuddyPress XProfile Image Field plugin: unauthenticated arbitrary file deletion on WordPressPackage2026-11-03 05:18 UTCby EPSS–WHAT TO DO CRITICAL9.8ACF Extended PRO (WordPress) <= 0.9.2.6: unauthenticated attackers can call arbitrary WordPress functions, fixed in 0.9.2.7acf-extended-proPackage2026-11-03 05:18 UTCby InfraStack Analyst–FIX 0.9.2.7 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @atedone/workspace-context (npm)@atedone/workspace-contextPackage2026-11-03 04:36 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @corexium/xbails (npm)@corexium/xbailsPackage2026-11-03 03:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/app (npm)@goparrot-dashboard/appPackage2026-11-03 03:30 UTCby osv-malicious–UNINSTALL CRITICALTECHNIQUEBetter Auth Expo plugin flaw lets anyone take over an account knowing only the victim's email (GHSA-4wq4-2ppv-q3hg, fixed in 1.7.16)@better-auth/expoPackage2026-11-03by InfraStack Analyst–FIX 1.7.16

Monday, Nov 2

CRITICALCAMPAIGNEXPLOITEDcPGuard breachOPSSHIELD breachcPGuard server security software update channel hijacked: attackers pushed a backdoor that steals root password hashes, SSH keys and cloud tokens (OPSSHIELD confirms)cPGuard2 talkingVendor2026-11-02 20:14 UTCby InfraStack Analyst2talkingFIX 5.88.25 HIGHCAMPAIGNDATA EXPOSEDMercado Bitcoin, Brazil's largest crypto exchange, breached: about $46M drained from its wallets, deposits and withdrawals haltedMercado BitcoinVendor2026-11-02 20:19 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8PUBLIC EXPLOITs2Member WordPress plugin up to 260927: item_name parameter allows PHP code executions2memberPackage2026-11-02 22:17 UTCby InfraStack Analyst–FIX 261001 MEDIUM6.9Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless…AI agents & MCP2026-11-02 21:34 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pyprig (PyPI)pyprigPackage2026-11-02 22:11 UTCby osv-malicious–UNINSTALL HIGHNOT SCOREDCVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerAI agents & MCP2026-11-02 21:43 UTCby Vendor & lab pages–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @ifasn/mmd-doc-mcp (npm)@ifasn/mmd-doc-mcpPackage2026-11-02 20:59 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @ifasn/md-doc-mcp (npm)@ifasn/md-doc-mcpPackage2026-11-02 20:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @ifasn/mmdd-doc-mcp (npm)@ifasn/mmdd-doc-mcpPackage2026-11-02 20:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @ifasn/mdd-doc-mcp (npm)@ifasn/mdd-doc-mcpPackage2026-11-02 20:58 UTCby osv-malicious–UNINSTALL CRITICAL9.4Secure Access server: forged requests let an attacker create admin accountsSecure Access serverInfrastructure2026-11-02 20:18 UTCby InfraStack Analyst–FIX 14.61 CRITICALNOT SCOREDSMS of DeathAndroid "SMS of Death": one malformed WAP Push text crashes the phone service and drops calls, including emergency callsandroid4 talkingRuntime2026-10-30by InfraStack Analyst4talkingFIX security patch level 2026-11-01 (Android 14, 15, 16, 16-qpr2, 17)CRITICAL9.3Secure Access servers: authentication bypass lets attackers change client security settingsInfrastructure2026-11-02 20:17 UTCby EPSS–WHAT TO DO CRITICAL9.8WordPress Ultra Addons for Contact Form 7: unauthenticated arbitrary file deletion leads to code executionPackage2026-11-02 20:17 UTCby EPSS–WHAT TO DO MEDIUM5.0AWS AI-DLC aidlc-traceability CLI: stored XSS in HTML traceability reportsAI agents & MCP2026-11-02 19:07 UTCby EPSS–WHAT TO DO CRITICAL9.5Joomla Custom Tables extension: unauthenticated file upload to web-accessible directoryOther2026-11-02 19:17 UTCby EPSS–WHAT TO DO CRITICAL9.4DJ-Classifieds Joomla extension: authenticated file upload leads to code executionPackage2026-11-02 19:17 UTCby EPSS–WHAT TO DO CRITICAL9.3DJ-Classifieds Joomla extension: unauthenticated SQL injection in frontend searchOther2026-11-02 19:17 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDCrewAI before 1.15.17: URL parser mismatch lets crafted URLs bypass the SSRF guardcrewaiAI agents & MCP2026-11-02 18:18 UTCby InfraStack Analyst–FIX 1.15.17 CRITICAL9.4Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual…Infrastructure2026-11-02 17:41 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDDBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation@bytebase/dbhubAI agents & MCP2026-06-24 07:42 UTCby GitHub Advisories–FIX 0.22.6 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bfvkjmeikpwhqxc (npm)bfvkjmeikpwhqxcPackage2026-11-02 17:32 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in internal-renderers (npm)internal-renderersPackage2026-11-02 17:17 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pandafortunerush (npm)pandafortunerushPackage2026-11-02 17:17 UTCby osv-malicious–UNINSTALL CRITICAL9.1SUSE Rancher Manager: meta proxy leaks credentials to cloud providersInfrastructure2026-10-29 17:26 UTCby EPSS–WHAT TO DO CRITICAL9.3kaniko: lookalike registry hostname leaks Azure access token during image buildsPackage2026-11-02 16:32 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in justinofficial (npm)justinofficialPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @levvicode/eslint-config (npm)@levvicode/eslint-configPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @levvicode/libsignal-node (npm)@levvicode/libsignal-nodePackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in aytidaoffc (npm)aytidaoffcPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @maulenv/baileys (npm)@maulenv/baileysPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in nachles (npm)nachlesPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in levvleys (npm)levvleysPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @levvicode/baileys (npm)@levvicode/baileysPackage2026-11-02 17:13 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-animatrix (npm)tailwind-animatrixPackage2026-11-02 16:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-animate-engine (npm)tailwind-animate-enginePackage2026-11-02 16:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-animate-final (npm)tailwind-animate-finalPackage2026-11-02 16:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in unjailed (npm)unjailedPackage2026-11-02 16:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-animate-test (npm)tailwind-animate-testPackage2026-11-02 16:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mrlegendbot/libsignal-node (npm)@mrlegendbot/libsignal-nodePackage2026-11-02 16:56 UTCby osv-malicious–UNINSTALL CRITICAL9.1SUSE Rancher Fleet: an ordinary Rancher user can get cluster-admin on the management clusterfleetInfrastructure2026-10-29 17:26 UTCby InfraStack Analyst–FIX 0.13.17 CRITICAL9.8Control Web Panel: unescaped file parameter lets users run OS commandsRuntime2026-11-02 16:17 UTCby EPSS–WHAT TO DO CRITICALNOT SCOREDINFINITT PACS: crafted imodular URI lets an attacker run codeINFINITT PACS System ManagerVendor2026-11-02 16:17 UTCby InfraStack Analyst–FIX 3.0.12.3 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @bigdevin55/calculator-install-demo (npm)@bigdevin55/calculator-install-demoPackage2026-11-02 16:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @bigdevin55/calculator-install-hook (npm)@bigdevin55/calculator-install-hookPackage2026-11-02 16:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @nuxzofficial/baileys (npm)@nuxzofficial/baileysPackage2026-11-02 16:04 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in nuxzofficial (npm)nuxzofficialPackage2026-11-02 16:04 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwindcss-animate-bridge (npm)tailwindcss-animate-bridgePackage2026-11-02 15:50 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @utilitycraft/tailwindcss-motion-atelier (npm)@utilitycraft/tailwindcss-motion-atelierPackage2026-11-02 15:50 UTCby osv-malicious–UNINSTALL CRITICALCAMPAIGNEXPLOITEDAttackers log in as admin on outdated BTCPay Server instances (2.4.1 and older) and drain their hot walletsBTCPay ServerVendor2026-11-02 15:03 UTCby InfraStack Analyst–FIX 2.4.7 CRITICALINCIDENTSentry: Sentry dashboard is downSentryVendor2026-11-02 15:20 UTCby status page–WHAT TO DO CRITICAL9.8Control Web Panel: path traversal lets attackers include arbitrary PHP filesRuntime2026-11-02 15:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Control Web Panel: missing exit after redirect lets unauthenticated users reach admin codeRuntime2026-11-02 15:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Control Web Panel: file write and OS command injection enable remote code executionOther2026-11-02 15:17 UTCby EPSS–WHAT TO DO MEDIUM6.3Chainlit 2.12.0: semicolon in MCP URLs bypasses path-restricted allowed_urlschainlitAI agents & MCP2026-08-25 17:06 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1python-jose: empty HMAC secret lets attackers forge accepted JWT tokensPackage2026-11-02 15:17 UTCby EPSS–WHAT TO DO MEDIUM5.3LaraDashboard: read-only users can send arbitrary email via MCP toolAI agents & MCP2026-11-01 19:02 UTCby EPSS–WHAT TO DO CRITICAL9.4madong-admin-saas: missing authentication lets anyone manage tenant accountsPackage2026-11-02 15:17 UTCby EPSS–WHAT TO DO CRITICAL9.2HotGo: SMS login bypass lets attackers take over accounts, including adminsOther2026-11-02 15:17 UTCby EPSS–WHAT TO DO CRITICAL9.8ape-volo-admin: hardcoded JWT key lets attackers forge admin tokensOther2026-11-02 15:17 UTCby EPSS–WHAT TO DO HIGH8.6PUBLIC EXPLOITWooCommerce gallery plugin lets shop managers take over the sitePackage2026-11-02 15:17 UTCby EPSS–WHAT TO DO HIGHCAMPAIGNEXPLOITEDXCPEx.cpeAndroid TV set-top boxes from OEM Videostrong ship with a factory-installed backdoor (XCPE) that sold access for ad fraud, residential proxies and more malware; 1.3M+ devices (Google)Videostrong Android TV set-top boxesVendor2026-11-02 14:00 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in atlassian-wallboard-plugin1 (npm)atlassian-wallboard-plugin1Package2026-11-02 13:34 UTCby osv-malicious–UNINSTALL CRITICAL9.3Barracuda Email Security Gateway: authentication bypass lets attackers change global configurationEmail Security Gateway1 talkingInfrastructure2026-11-02 13:17 UTCby InfraStack Analyst1talkingFIX 9.4.0.030 HIGHCAMPAIGNEXPLOITEDDanfoss freezer attacksInternet-exposed Danfoss supermarket refrigeration controllers hijacked to heat fridges and freezers to 50°C overnight; attacks now reported in 12 countries including RomaniaDanfoss AK-SM 800A7 talkingInfrastructure2026-10-13by InfraStack Analyst7talkingFIX R4.3.1 HIGHCAMPAIGNDON'T CLICKFake IT support on Microsoft Teams gets remote control via Quick Assist, then abuses misconfigured AD CS (ESC1, ESC8) for domain-admin certificates and steals data (Microsoft)Microsoft TeamsInfrastructure2026-11-02 11:08 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1@fastify/http-proxy: route parameters can escape the pinned upstream pathPackage2026-11-02 08:55 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in persona-ai-sdk (npm)persona-ai-sdkPackage2026-11-02 11:02 UTCby osv-malicious–UNINSTALL CRITICAL10.0WAVLINK WN551X3-A router: remote OS command injection via DNS handlerWN551X3-AInfrastructure2026-11-02 06:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.4WSO2 API Manager and related products: System REST APIs let low-privilege users run admin actions (CVE-2025-11969)WSO2 API ManagerOther2026-11-02 06:17 UTCby InfraStack Analyst–FIX 4.5.0 U32 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in scdn-jquery (npm)scdn-jqueryPackage2026-11-03 03:47 UTCby osv-malicious–UNINSTALL CRITICAL10.0WAVLINK router: remote OS command injection via WireGuard group handlerWN551X3-AInfrastructure2026-11-02 05:18 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard-api/store (npm)@goparrot-dashboard-api/storePackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/combos (npm)@goparrot-dashboard/combosPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard-api/shared (npm)@goparrot-dashboard-api/sharedPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/payment (npm)@goparrot-dashboard/paymentPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard-api/role-v2 (npm)@goparrot-dashboard-api/role-v2Package2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/franchise-menu-settings (npm)@goparrot-dashboard/franchise-menu-settingsPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/store (npm)@goparrot-dashboard/storePackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/settings (npm)@goparrot-dashboard/settingsPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/loyalty (npm)@goparrot-dashboard/loyaltyPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/franchise-directory (npm)@goparrot-dashboard/franchise-directoryPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/analytics (npm)@goparrot-dashboard/analyticsPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard-api/orchestration (npm)@goparrot-dashboard-api/orchestrationPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/auth (npm)@goparrot-dashboard/authPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/homepages (npm)@goparrot-dashboard/homepagesPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/category (npm)@goparrot-dashboard/categoryPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/order (npm)@goparrot-dashboard/orderPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/marketing (npm)@goparrot-dashboard/marketingPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/combo-group (npm)@goparrot-dashboard/combo-groupPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/menu (npm)@goparrot-dashboard/menuPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/promotion (npm)@goparrot-dashboard/promotionPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/franchise-marketing (npm)@goparrot-dashboard/franchise-marketingPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/i18n (npm)@goparrot-dashboard/i18nPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard-api/users (npm)@goparrot-dashboard-api/usersPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @goparrot-dashboard/franchise-management (npm)@goparrot-dashboard/franchise-managementPackage2026-11-02 03:53 UTCby osv-malicious–UNINSTALL HIGH7.3Network-AI: A2AServer lets unauthenticated callers run and cancel agent tasksAI agents & MCP2026-10-17 18:17 UTCby EPSS–WHAT TO DO HIGH8.8LobeHub Chat: path traversal lets logged-in users overwrite server filesAI agents & MCP2026-10-17 19:28 UTCby EPSS–WHAT TO DO HIGH8.8Network-AI: path traversal in job store reads or deletes arbitrary JSON filesAI agents & MCP2026-10-17 18:16 UTCby EPSS–WHAT TO DO HIGH8.8Network-AI: path traversal in AgentVCR lets attackers read or overwrite JSON filesAI agents & MCP2026-10-17 18:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in contracts-upgradeable (npm)contracts-upgradeablePackage2026-11-02 02:31 UTCby osv-malicious–UNINSTALL MEDIUM5.3MCPHub: header passthrough flaw can leak information to remote callersAI agents & MCP2026-11-02 02:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Termix: path traversal in file transfer endpoint lets remote users write filesOther2026-11-02 02:18 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @an1mshnpmb9c84920/pipeprobe-obf-m19n5 (npm)@an1mshnpmb9c84920/pipeprobe-obf-m19n5Package2026-11-02 01:50 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @axo_cuy/baileys (npm)@axo_cuy/baileysPackage2026-11-02 01:45 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @bil-rgb/baileys (npm)@bil-rgb/baileysPackage2026-11-02 01:41 UTCby osv-malicious–UNINSTALL CRITICAL10.0WAVLINK WN536AX6-A router: remote stack overflow in OpenVPN handlerWN536AX6-AInfrastructure2026-11-02 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN536AX6-A router: remote command injection via host_black MAC argumentWN536AX6-AInfrastructure2026-11-02 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0Linksys E8450 router: remote stack overflow via portal.cgi timezone fieldE8450Infrastructure2026-11-02 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WN536AX6-A router: remote command injection via protocol.csp file_idWN536AX6-AInfrastructure2026-11-02 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WN536AX6-A router: WireGuard group handler command injection, firmware V260507WN536AX6-AInfrastructure2026-11-02 01:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WN536AX6-A router: command injection via WireGuard group name, no fix listedWN536AX6-AInfrastructure2026-11-02 00:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WN536AX6-A router: web interface command injection allows remote code executionWN536AX6-AInfrastructure2026-11-02 00:18 UTCby InfraStack Analyst–WHAT TO DO

Sunday, Nov 1

MEDIUM6.5MiniMax Code: find command handler lets remote attackers inject OS commandsMiniMax CodeAI agents & MCP2026-11-01 23:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-screenshot-native (npm)dsh-screenshot-nativePackage2026-11-01 22:50 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in wallet-adapter-base (npm)wallet-adapter-basePackage2026-11-01 21:33 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bigbob22-test (npm)bigbob22-testPackage2026-11-01 21:27 UTCby osv-malicious–UNINSTALL CRITICAL9.9WAVLINK WN553X1-B router: remote OS command injection via WireGuard group handlerWN553X1-BInfrastructure2026-11-01 19:16 UTCby InfraStack Analyst–WHAT TO DO HIGHCAMPAIGNDATA EXPOSEDn0nn0n ransomware breaks in with stolen or weak passwords (credential stuffing on FortiGate SSL-VPN, leaked AWS keys, RDP/WinRM), steals and wipes data and backups, and uses AI coding agents to write its tools; 93 victims including 38 port and maritime orgsFortiGate SSL-VPNInfrastructure2026-10-28 08:02 UTCby InfraStack Analyst–WHAT TO DO MEDIUM4.3ag-ui protocol: interrupt expiry check lets remote requests exhaust resourcesAI agents & MCP2026-11-01 18:17 UTCby EPSS–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WN553X1-B router: remote OS command injection via file_id argumentWN553X1-BInfrastructure2026-11-01 18:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WN553X1-B router: remote command injection via WireGuard handlerWN553X1-BInfrastructure2026-11-01 18:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in atlassian-wallboard-plugin (npm)atlassian-wallboard-pluginPackage2026-11-01 18:05 UTCby osv-malicious–UNINSTALL MEDIUM6.5ag-ui protocol: improper input validation in transport decoder handlerAI agents & MCP2026-11-01 17:16 UTCby EPSS–WHAT TO DO CRITICAL9.3BookIt WordPress plugin: SQL injection lets attackers read or change databasebookitPackage2026-11-01 16:18 UTCby InfraStack Analyst–FIX 2.6.0.7 MEDIUM5.5ag-ui-protocol: HttpAgent client flaw leaks information to remote attackersAI agents & MCP2026-11-01 16:18 UTCby EPSS–WHAT TO DO MEDIUM4.3ag-ui TypeScript client: a malicious server's huge HTTP error response can exhaust the client's memory@ag-ui/clientAI agents & MCP2026-11-01 16:18 UTCby InfraStack Analyst–WHAT TO DO MEDIUM4.3AG-UI protocol SSE parser lets remote input exhaust client resourcesAI agents & MCP2026-11-01 16:18 UTCby EPSS–WHAT TO DO CRITICAL10.0Prefab UI: Generative UI sandbox lets Python read and write server filesPackage2026-11-01 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.9WAVLINK WN553X1-B router: authenticated OS command injection as root via openvpn_cli file_idWN553X1-BInfrastructure2026-11-01 15:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN701AE router: web backend flaw allows remote OS command injectionWN701AEInfrastructure2026-11-01 15:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1WAVLINK WN553X1-B router: remote OS command injection via file_id argumentWN553X1-BInfrastructure2026-11-01 14:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN553X1-B router: remote command injection via group_id parameterWN553X1-BInfrastructure2026-11-01 14:18 UTCby InfraStack Analyst–WHAT TO DO MEDIUMCAMPAIGNEXPLOITEDAI agent impersonationScanner disguised as ChatGPT, Claude and Perplexity bots hunts web servers for exposed .env files, cloud credentials and SSH keys (Cequence)WAF / bot management allowlists for AI crawlersInfrastructure2026-10-28by InfraStack Analyst–WHAT TO DO CRITICAL9.9Beta9: tenant image builds escape to the build worker hostOther2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Beta9 worker: sandbox file API reads and writes host files as rootOther2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Beta9: tenant can mount host paths and read other tenants' filesPackage2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9WAVLINK WN701AE router: web backend command injection via rule_name argumentWN701AEInfrastructure2026-11-01 13:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9Oray Pugongying X5 Pro 7.6.1: a restricted account can run any admin API through run_apis_by_json (factory reset shown)Pugongying X5 ProInfrastructure2026-11-01 11:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1Oray Pugongying X5 Pro router: path traversal in config restore lets attackers write filesPugongying X5 ProInfrastructure2026-11-01 11:18 UTCby InfraStack Analyst–WHAT TO DO NOT SCOREDNOT SCOREDPUBLIC EXPLOITForge API let writers change archived repositories' releases and labelsOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @axon-web/icons (npm)@axon-web/iconsPackage2026-11-01 08:02 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in hs-framework (npm)hs-frameworkPackage2026-11-01 08:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in privacypass-py (PyPI)privacypass-pyPackage2026-11-01 08:01 UTCby osv-malicious–UNINSTALL CRITICAL10.0WAVLINK router: remote command injection via protocol.csp group_nameWL-WN530BE1-AInfrastructure2026-11-01 05:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WL-WN530HG4B router: remote command injection via port forwardingWL-WN530HG4BInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WL-WN579A3-A router: remote command injection via setup wizardWL-WN579A3-AInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN579X3-D router: command injection via port forwarding lets remote attackers run commandsWN579X3-DInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in axelarjs-sdk (npm)axelarjs-sdkPackage2026-11-01 02:23 UTCby osv-malicious–UNINSTALL MEDIUM5.5Presenton: desktop authentication middleware exposes files under app_dataAI agents & MCP2026-11-01 02:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in sol-wallet-adapter (npm)sol-wallet-adapterPackage2026-11-01 01:46 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in cutekitten-test (npm)cutekitten-testPackage2026-11-01 01:32 UTCby osv-malicious–UNINSTALL CRITICAL10.0D-Link DIR-505 router: remote stack overflow in TFTP upload handlerDIR-505Infrastructure2026-11-01 01:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in calculator-preinstall-hook-demo (npm)calculator-preinstall-hook-demoPackage2026-11-01 00:40 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in calculator-preinstall-chain-demo (npm)calculator-preinstall-chain-demoPackage2026-11-01 00:39 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pystr-codec (PyPI)pystr-codecPackage2026-11-01 00:13 UTCby osv-malicious–UNINSTALL

Saturday, Oct 31

CRITICAL9.8Apache MINA 3.0 codec: Java deserialization lets a peer run codePackage2026-10-31 21:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in claims-ac1 (npm)claims-ac1Package2026-10-31 18:22 UTCby osv-malicious–UNINSTALL CRITICAL9.8AJ-Report: hard-coded JWT secret lets attackers run code remotelyAJ-ReportPackage2026-10-31 18:17 UTCby InfraStack Analyst–WHAT TO DO HIGH7.1Highflame ramparts: security scanner skips nested .pyc files, hiding malicious skill coderampartsAI agents & MCP2026-10-31 18:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUM6.3DeepInfer: unauthenticated /profile endpoint lets remote users create arbitrary directoriesdeepinferAI agents & MCP2026-10-31 18:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Jpom: auth bypass via token header grants super-admin, then command executionOther2026-10-31 18:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mamans2973/maman (npm)@mamans2973/mamanPackage2026-10-31 16:09 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in doctreelstm (PyPI)doctreelstmPackage2026-10-31 13:39 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ms-client-portal (npm)ms-client-portalPackage2026-10-31 13:10 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in multi-convert (PyPI)multi-convertPackage2026-10-31 13:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in md-to-slides (PyPI)md-to-slidesPackage2026-10-31 12:57 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in skills-analyzer (PyPI)skills-analyzerPackage2026-10-31 12:55 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in is-it-ai (PyPI)is-it-aiPackage2026-10-31 12:48 UTCby osv-malicious–UNINSTALL MEDIUMCAMPAIGNDATA EXPOSEDChainalysis breached by an attacker using AI agent tooling: names, emails, user IDs and roles of customer platform users exposedChainalysis2 talkingVendor2026-10-31by InfraStack Analyst2talkingWHAT TO DO CRITICAL9.8WordPress SimpleForm plugin: unauthenticated file upload leads to code executionPackage2026-10-31 09:16 UTCby EPSS–WHAT TO DO CRITICAL9.1Acadlix LMS WordPress plugin: arbitrary file deletion leads to code executionacadlixPackage2026-10-31 09:16 UTCby InfraStack Analyst–FIX 1.2.0 CRITICAL9.8WordPress Uncanny Toolkit for LearnDash: login check bypass lets suspended accounts inPackage2026-10-31 08:16 UTCby EPSS–WHAT TO DO CRITICAL9.8PUBLIC EXPLOITWordPress Project Manager plugin: unauthenticated remote code execution via id parameterPackage2026-10-31 08:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in local-commander-agent (npm)local-commander-agentPackage2026-10-31 07:57 UTCby osv-malicious–UNINSTALL CRITICAL9.1Popup Builder WordPress plugin: unauthenticated request trashes all published popupsPackage2026-10-31 07:16 UTCby EPSS–WHAT TO DO CRITICAL9.1WP Booking System plugin: any logged-in subscriber can delete calendar noteswp-booking-systemPackage2026-10-31 07:16 UTCby InfraStack Analyst–FIX 2.1.0.6 CRITICAL9.8WordPress PDF Invoice plugin: unauthenticated checkout field lets attackers run codepdf-for-woocommercePackage2026-10-31 07:16 UTCby InfraStack Analyst–FIX 7.2.0 HIGH8.1EXPLOITEDWordPress Core: predictable upgrade paths let attackers run code on the serverWordPress2 talkingRuntime2026-10-31 06:16 UTCby InfraStack Analyst2talkingFIX 7.1.4 CRITICAL9.3Elixir Assent: Sign in with Apple callback lets attackers impersonate other usersPackage2026-10-30 23:51 UTCby EPSS–WHAT TO DO

Friday, Oct 30

HIGH8.8TAKO AI Agent for Okta: any logged-in user runs Python as rootAI agents & MCP2026-06-30 16:16 UTCby EPSS–WHAT TO DO CRITICAL9.8TAKO AI Agent for Okta: unauthenticated first-admin setup lets attackers take overAI agents & MCP2026-06-30 16:10 UTCby EPSS–WHAT TO DO CRITICAL9.8Signal K resources API path traversal can disclose the JWT signing secret and enable remote code executionsignalk-serverPackage2026-10-18 19:03 UTCby GitHub Advisories–FIX 2.34.0 CRITICAL9.8imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code executiongithub.com/imgproxy/imgproxy/v3Package2026-10-06 15:30 UTCby GitHub Advisories–FIX 4.0.16 CRITICALCAMPAIGNDATA EXPOSEDNorthflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being usedNorthflank3 talkingVendor2026-10-30by InfraStack Analyst3talkingWHAT TO DO CRITICAL9.1ThingLinks IoT platform: unauthenticated SQL injection lets attackers tamper with sensor dataVendor2026-06-27 09:55 UTCby EPSS–WHAT TO DO CRITICAL9.9ThingLinks IoT platform: authenticated users can run server codeOther2026-06-27 09:54 UTCby EPSS–WHAT TO DO CRITICAL9.6MoLing MCP server: browser page can run tool calls over SSEAI agents & MCP2026-06-27 13:57 UTCby EPSS–WHAT TO DO CRITICAL9.1ssl_verify_fun: partial wildcard certificates impersonate TLS peers in hostname checksPackage2026-10-30 20:24 UTCby EPSS–WHAT TO DO MEDIUMCAMPAIGNDON'T CLICKPhishing emails trick users into installing a legitimate Zecurit Agent RMM configured by attackers for remote access (Unit 42)Zecurit AgentVendor2026-10-30 20:28 UTCby InfraStack Analyst–WHAT TO DO CRITICALNOT SCOREDpypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPIpypa/gh-action-pypi-publishPackage2026-10-21 17:37 UTCby GitHub Advisories–FIX 1.14.3 CRITICAL9.8Thales Sentinel Keys Server: HTTP request overflow allows remote code as SYSTEM on WindowsVendor2026-10-30 20:17 UTCby EPSS–WHAT TO DO CRITICAL9.3Kargo: project RBAC API lets delegated users escalate to project adminInfrastructure2026-06-26 16:10 UTCby EPSS–WHAT TO DO CRITICAL9.1PinePods: podcast feed enclosures let users reach internal servicesPackage2026-06-26 16:00 UTCby EPSS–WHAT TO DO CRITICAL9.8HoneySQL: user input turned into SQL identifiers enables SQL injectionPackage2026-06-26 19:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Arc time-series database: query endpoint lets tenants read other databasesAI agents & MCP2026-06-25 22:00 UTCby EPSS–WHAT TO DO HIGH7.1RAGFlow: authenticated users can run other users' private agents and read outputAI agents & MCP2026-10-05 04:38 UTCby EPSS–WHAT TO DO HIGH8.2PUBLIC EXPLOITpgAdmin 4: Kerberos credentials leak lets any user connect as service accountPackage2026-10-30 20:17 UTCby EPSS–WHAT TO DO CRITICAL9.9pgAdmin 4: Import/Export quoting bypass lets a database user run OS commandsPackage2026-10-30 20:17 UTCby EPSS–WHAT TO DO CRITICAL9.2pgAdmin 4: login lockout bypass allows unlimited password guessing on server modePackage2026-10-30 20:17 UTCby EPSS–WHAT TO DO CRITICAL9.8LeadSnap WordPress plugin: unauthenticated PHP object injection in versions up to 1.25Package2026-10-30 19:20 UTCby EPSS–WHAT TO DO HIGH8.2praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)github.com/mtzanidakis/praktorAI agents & MCP2026-06-26 08:10 UTCby EPSS–FIX 0.9.1 CRITICAL9.3Transliterator WordPress plugin: unauthenticated SQL injection exposes databasePackage2026-10-30 19:18 UTCby EPSS–WHAT TO DO CRITICAL9.8FunnelKit Automations: unauthenticated PHP object injection in WordPress pluginwp-marketing-automationsPackage2026-10-30 19:18 UTCby InfraStack Analyst–FIX 3.8.6.2 CRITICAL9.8ThemeREX Royal Event theme: untrusted data deserialization lets attackers inject objectsThemeREX Royal EventOther2026-10-30 19:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1WordPress Widget Options plugin: author-level flaw allows remote code executionPackage2026-10-30 19:18 UTCby EPSS–WHAT TO DO CRITICAL9.8SMS Alert Order Notifications WordPress plugin: unauthenticated privilege escalationsms-alertPackage2026-10-30 19:18 UTCby InfraStack Analyst–WHAT TO DO HIGH8.8LM Studio: crafted model download writes files and runs attacker Python on launchAI agents & MCP2026-10-30 18:17 UTCby EPSS–WHAT TO DO CRITICAL9.0Flowise: authenticated users can run OS commands through custom functionsflowiseAI agents & MCP2026-07-29 21:09 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.0JetBrains Toolbox and IntelliJ IDEA: daemon trusts compromised intermediate certificatesOther2026-10-30 18:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-reportingui (npm)vas-tops2-reportinguiPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-digital-assistant-ui (npm)vas-tops2-digital-assistant-uiPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-core-property-search (npm)vas-tops2-core-property-searchPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-core-clients-search (npm)vas-tops2-core-clients-searchPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-core-client-cleanup-ui (npm)vas-tops2-core-client-cleanup-uiPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @tops2/digital-assistant-ui (npm)@tops2/digital-assistant-uiPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vas-tops2-bidmatrix-ui (npm)vas-tops2-bidmatrix-uiPackage2026-10-30 18:06 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tefeest-npm-com-test (npm)tefeest-npm-com-testPackage2026-10-30 18:04 UTCby osv-malicious–UNINSTALL CRITICAL10.0Bazarr: unauthenticated Plex endpoints let anyone change config and steal credentialsPackage2026-06-24 14:18 UTCby EPSS–WHAT TO DO MEDIUM6.1DBHub MCP server: read-only check bypassed on MySQL and MariaDBAI agents & MCP2026-06-24 07:42 UTCby EPSS–WHAT TO DO CRITICAL10.0PUBLIC EXPLOITCanonical LXD: flawed certificate checks let attackers log in as trusted clients4 talkingInfrastructure2026-10-30 17:17 UTCby EPSS4talkingWHAT TO DO MEDIUM6.3PUBLIC EXPLOITRancher Manager: authenticated users can reach management cluster shellInfrastructure2026-10-29 17:26 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in neuralwhatsapp (npm)neuralwhatsappPackage2026-10-30 17:11 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in apex-fetch (npm)apex-fetchPackage2026-10-30 16:31 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ourin-baileys (npm)ourin-baileysPackage2026-10-30 16:31 UTCby osv-malicious–UNINSTALL CRITICAL9.2pybars3: crafted templates run Python code in the application processPackage2026-10-30 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.2pybars4: crafted Handlebars templates run Python code in the appPackage2026-10-30 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.4PipesHub: indexing service fetches internal URLs embedded in documentsAI agents & MCP2026-10-25 16:24 UTCby EPSS–WHAT TO DO HIGH8.8Paperclip: agent API key holders can run shell commands on the serverAI agents & MCP2026-04-16 12:21 UTCby EPSS–WHAT TO DO MEDIUM6.3xiaozhi-esp32-server: WebSocket auth bypass lets attackers impersonate devicesxiaozhi-esp32-serverAI agents & MCP2026-10-30 16:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8LMDeploy: unauthenticated pickle upload to /update_weights runs OS commandsAI agents & MCP2026-10-30 16:17 UTCby EPSS–WHAT TO DO CRITICALNOT SCOREDTenda W18E router: command injection via diagnose packet-capture featureTenda W18EInfrastructure2026-10-30 16:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in grizzly-baileys (npm)grizzly-baileysPackage2026-10-30 16:16 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tabby-fknat (npm)tabby-fknatPackage2026-10-30 15:30 UTCby osv-malicious–UNINSTALL CRITICAL9.4Google Cloud Application Integration: SubWorkflow task lets an authenticated user run codeApplication IntegrationVendor2026-10-28 15:19 UTCby InfraStack Analyst–FIX 2026-09-11 CRITICAL9.4SOCFortress CoPilot: hardcoded webhook secret lets anonymous callers bypass authenticationOther2026-06-23 20:34 UTCby EPSS–WHAT TO DO CRITICAL9.3SOCFortress CoPilot: unauthenticated report mount leaks cloud credentials and findingsPackage2026-06-23 20:46 UTCby EPSS–WHAT TO DO CRITICAL9.8ng-antd-admin: hardcoded default JWT secret lets attackers forge admin tokensOther2026-06-24 01:42 UTCby EPSS–WHAT TO DO CRITICAL10.0SOCFortress CoPilot: upload filename lets authenticated users overwrite server filesPackage2026-06-24 01:51 UTCby EPSS–WHAT TO DO CRITICAL9.9SOCFortress CoPilot: stored XSS in alert comments steals login tokensPackage2026-06-23 20:26 UTCby EPSS–WHAT TO DO MEDIUM5.3Tamery: authenticated users can write messages into other users' AI chat historyAI agents & MCP2026-10-30 15:16 UTCby EPSS–WHAT TO DO CRITICAL9.8MuseBot: hard-coded session key lets attackers forge admin sessionsOther2026-10-30 15:16 UTCby EPSS–WHAT TO DO CRITICAL9.0Vvveb CMS: admin can read and overwrite other admins' API tokensOther2026-10-29 01:12 UTCby EPSS–WHAT TO DO CRITICAL9.8Vvveb CMS: password reset flaw lets attackers bypass loginPackage2026-10-29 01:12 UTCby EPSS–WHAT TO DO HIGHTECHNIQUEEXPLOITEDUnpatched WordPress sites (4.7 to 7.1.3) can be taken over during a core update: attackers race to hit the installer in wp-content/upgrade (no CVE)WordPressPackage2026-10-30by InfraStack Analyst–FIX 7.1.4 CRITICALINCIDENTGitHub: Disruption with GitHub servicesGitHubVendor2026-10-30 14:31 UTCby status page–WHAT TO DO MEDIUM5.3AxonHub: project users can mint system-level API keys and read channel configsAxonHubAI agents & MCP2026-10-30 14:16 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8OpenDeepWiki: hard-coded JWT key lets anyone forge admin tokensOpenDeepWikiAI agents & MCP2026-10-30 14:16 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @nexlayerlabs/postcss-keyframe-utils (npm)@nexlayerlabs/postcss-keyframe-utilsPackage2026-10-30 12:37 UTCby osv-malicious–UNINSTALL HIGHCAMPAIGNEXPLOITEDCryptoBilisHardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phraseTrezor Safe 5Vendor2026-10-30by InfraStack Analyst–WHAT TO DO CRITICAL9.1vsftpd: TLS session reuse lets attackers hijack FTPS data connectionsvsftpdRuntime2026-10-30 12:16 UTCby InfraStack Analyst–WHAT TO DO HIGH8.2n8n: Databricks node path traversal lets outsiders read stored secretsAI agents & MCP2026-09-16 08:23 UTCby EPSS–WHAT TO DO CRITICAL9.2CakePHP: unvalidated window frame values let attackers inject SQLRuntime2026-10-30 12:16 UTCby EPSS–WHAT TO DO CRITICAL9.2CakePHP: unvalidated collation names let attackers inject SQLRuntime2026-10-30 12:16 UTCby EPSS–WHAT TO DO HIGH8.8n8n: deprecated Function nodes let authenticated users run code on serverAI agents & MCP2026-10-28 08:47 UTCby EPSS–WHAT TO DO CRITICAL9.5PUBLIC EXPLOITClickHouse Server: unauthenticated network user can run arbitrary code3 talkingRuntime2026-10-30 11:17 UTCby InfraStack Analyst3talkingWHAT TO DO CRITICAL9.8Dahua Intelligent Connection Center: crafted request runs commands remotelyInfrastructure2026-10-30 11:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUMCAMPAIGNEXPLOITEDApple sends a new round of mercenary spyware threat notifications to targeted iPhone users in 99 countries, tied to new attacksiOS7 talkingVendor2026-08-13by InfraStack Analyst7talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in stdid-nyxprobe (PyPI)stdid-nyxprobePackage2026-10-30 10:03 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in log-utils-sdk (PyPI)log-utils-sdkPackage2026-10-30 09:17 UTCby osv-malicious–UNINSTALL CRITICAL9.4Teltonika RUTOS and TSWOS: unauthenticated Lua calls let attackers run OS commandsRUTOSInfrastructure2026-10-30 08:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8PUBLIC EXPLOITGravity Forms: unauthenticated PHP object injection through post custom fieldsPackage2026-10-30 07:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in claims-acct-unlock (npm)claims-acct-unlockPackage2026-10-30 07:14 UTCby osv-malicious–UNINSTALL NOT SCOREDNOT SCOREDDrupal AI module: cross-site scripting flaw in versions up to 1.5.2AI agents & MCP2026-10-30 04:18 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDDrupal AI module: insecure storage lets attackers retrieve embedded sensitive dataAI agents & MCP2026-10-30 04:18 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDDrupal AI module: stored cross-site scripting in web page generationAI agents & MCP2026-10-30 04:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDDrupal AI module: cross-site scripting lets attackers run scripts in pagesdrupal/aiAI agents & MCP2026-10-30 04:18 UTCby InfraStack Analyst–FIX 1.4.11 NOT SCOREDNOT SCOREDDrupal AI module: cross-site scripting lets attackers run scripts in browsersAI agents & MCP2026-10-30 04:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDDrupal AI module: incorrect authorization allows resource injectiondrupal/aiAI agents & MCP2026-10-30 04:18 UTCby InfraStack Analyst–FIX 1.4.11 CRITICALNOT SCOREDEXPLOITEDDrupal Commerce Core: missing access check exposes pages to forceful browsing3 talkingPackage2026-10-30 04:18 UTCby InfraStack Analyst3talkingWHAT TO DO CRITICALNOT SCOREDChrome: memory corruption in MediaStream lets a crafted page read memoryRuntime2026-10-30 01:16 UTCby EPSS–WHAT TO DO CRITICALCAMPAIGNEXPLOITEDanthropic.claude-code 2.1.313svc-telemetryBackdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machinesClaude Code for VS Code43 talkingAI agents & MCP2026-10-29by InfraStack Analyst43talkingFIX 2.1.314 HIGHCAMPAIGNDATA EXPOSEDBlack OctoberBlack October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjackingRailway2 talkingVendor2026-10-30by InfraStack Analyst2talkingWHAT TO DO HIGH4.3EXPLOITEDUse of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote…Ivanti Connect Secure3 talkingVendor2026-10-30by InfraStack Analyst3talkingFIX 25.1.1.3

Thursday, Oct 29

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in twitter-request-diagnostics (PyPI)twitter-request-diagnosticsPackage2026-10-29 23:44 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in test-01-rafamarrara-learning-dc (PyPI)test-01-rafamarrara-learning-dcPackage2026-10-29 23:42 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ssite-mock-server (npm)ssite-mock-serverPackage2026-10-29 23:38 UTCby osv-malicious–UNINSTALL HIGH8.7PUBLIC EXPLOITPrivilege manager agent lets remote attackers run code as SYSTEMDelinea Privilege Manager Windows agentOther2026-10-29 23:17 UTCby InfraStack Analyst–FIX 12.0.5804 CRITICAL9.3Veeam Management Pack: unauthenticated remote code execution on serversVeeam Management Pack for Microsoft System CenterVendor2026-10-29 23:16 UTCby InfraStack Analyst–FIX 13.1.0.334 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @sxm-content-creators/tools-ds (npm)@sxm-content-creators/tools-dsPackage2026-10-29 22:41 UTCby osv-malicious–UNINSTALL HIGHCAMPAIGNFake Solana starter kit on GitHub (SolanaUpdateTools/solana-starter-kit) tricks AI coding agents into running a PowerShell one-liner that installs NetSupport RATGitHubAI agents & MCP2026-10-29 22:09 UTCby InfraStack Analyst–WHAT TO DO HIGHCAMPAIGNEXPLOITEDMalicious Hugging Face models posing as Qwen2 test checkpoints install a crypto miner and reverse shell on GPU inference servers when loaded with trust_remote_code (back after takedown)Hugging Face Hub2 talkingAI agents & MCP2026-10-29 22:09 UTCby InfraStack Analyst2talkingWHAT TO DO CRITICAL9.0SOCFortress CoPilot: low-privilege users can run code via report templatesOther2026-06-23 16:50 UTCby EPSS–WHAT TO DO CRITICAL9.1Docat: upload API lets attackers write arbitrary files to the serverPackage2026-06-23 08:15 UTCby EPSS–WHAT TO DO CRITICALNOT SCOREDSpreadsheet::XLSX for Perl: crafted spreadsheet runs arbitrary code on parsePackage2026-10-29 22:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc (npm)dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llcPackage2026-10-29 22:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dowload_ebok_lolita_by_vladimir_nabokov_oy1gy (npm)dowload_ebok_lolita_by_vladimir_nabokov_oy1gyPackage2026-10-29 22:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dowload_ebok_armageddon_by_max_hastings_kv3s4 (npm)dowload_ebok_armageddon_by_max_hastings_kv3s4Package2026-10-29 22:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t (npm)dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6tPackage2026-10-29 22:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p (npm)dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55pPackage2026-10-29 22:14 UTCby osv-malicious–UNINSTALL HIGHCAMPAIGNDATA EXPOSEDBinance-hacker-1029TraderTraitorBinance hot wallets drained of more than $6B on 29 Oct 2026; FBI attributes the hack to North Korea's TraderTraitorBinance45 talkingVendor2026-09-19 01:23 UTCby InfraStack Analyst45talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dependencykfeg (npm)dependencykfegPackage2026-10-29 21:26 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bq-helix-build-hook-6ade983e (PyPI)bq-helix-build-hook-6ade983ePackage2026-10-29 19:58 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bq-helix-recon-6ade983e (PyPI)bq-helix-recon-6ade983ePackage2026-10-29 19:56 UTCby osv-malicious–UNINSTALL LOW3.7PUBLIC EXPLOITnode-forge: weak PKCS#7 padding check lets malformed ciphertext decryptPackage2026-10-27 05:09 UTCby EPSS–WHAT TO DO CRITICAL9.4ServiceNow AI Platform: sandbox escape lets an admin run host codeVendor2026-10-29 19:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in orderbook-volt-plugin (npm)orderbook-volt-pluginPackage2026-10-29 18:47 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dependencykfee-2 (npm)dependencykfee-2Package2026-10-29 18:45 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in react-native-drago-callkit (npm)react-native-drago-callkitPackage2026-10-29 18:35 UTCby osv-malicious–UNINSTALL NOT SCOREDNOT SCOREDAgent Zero: directory traversal lets file writes escape the intended folderagent-zeroAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO NOT SCOREDNOT SCOREDDB-GPT: directory traversal lets remote users write files outside workspaceDB-GPTAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUMNOT SCOREDSuperAGI: authenticated users can list another organization's agentsSuperAGIAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUMNOT SCOREDSuperAGI: authenticated users can read other organizations' agent execution metadataSuperAGIAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUMNOT SCOREDSuperAGI: agent execution configs readable across organizations by IDSuperAGIAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO NOT SCOREDNOT SCOREDXAgent: directory traversal in file upload lets attackers write outside the folderXAgentAI agents & MCP2026-10-29 18:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.2Botan C++ cryptography library: block size truncation enables memory corruptionPackage2026-09-01 22:08 UTCby EPSS–WHAT TO DO HIGH8.7PUBLIC EXPLOITminimatch has potential denial of service via globparts amplificationminimatchPackage2026-10-27 22:23 UTCby EPSS–FIX 11.0.1 CRITICAL9.3Monkeytype: CI workflow lets forked pull requests run code with repository write tokenOther2026-10-08 16:57 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @chatunitycenter/baileys (npm)@chatunitycenter/baileysPackage2026-10-29 16:52 UTCby osv-malicious–UNINSTALL HIGH7.5@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY@sylphx/pdf-reader-mcpAI agents & MCP2026-06-25 12:07 UTCby EPSS–FIX 3.0.1 CRITICAL9.8Langflow: improper authentication lets a remote attacker bypass security restrictions1 talkingAI agents & MCP2026-10-29 16:20 UTCby EPSS1talkingWHAT TO DO MEDIUM6.5Langflow: authenticated users can exhaust resources and cause denial of serviceLangflow OSSAI agents & MCP2026-10-29 16:20 UTCby InfraStack Analyst–FIX 1.12.5 CRITICAL9.1WS_FTP Server: delegated host administrators can run commands with elevated privilegesRuntime2026-10-29 16:20 UTCby EPSS–WHAT TO DO CRITICAL9.1WS_FTP Server: path traversal lets delegated host admin reach files outside scopeRuntime2026-10-29 16:20 UTCby EPSS–WHAT TO DO CRITICAL9.0WS_FTP Server: OS command injection lets attackers run commands on WindowsPackage2026-10-29 16:20 UTCby EPSS–WHAT TO DO CRITICAL9.1WS_FTP Server: path traversal lets delegated admin reach files outside scopeInfrastructure2026-10-29 16:20 UTCby EPSS–WHAT TO DO CRITICAL9.9WS_FTP Server: OS command injection lets attackers run commands on WindowsInfrastructure2026-10-29 16:20 UTCby EPSS–WHAT TO DO CRITICAL10.0WS_FTP Server: improper authentication exposes admin credentials to unauthenticated attackersInfrastructure2026-10-29 16:19 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: flow and project exports leak secrets to authenticated usersAI agents & MCP2026-10-29 16:18 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: authenticated users can overwrite arbitrary files on the serverAI agents & MCP2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Edge Decor WordPress plugin: unauthenticated PHP object injection up to 2.9Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8EmojiNation WordPress plugin: unauthenticated PHP object injection through version 1.0.12Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Gamezone WordPress theme: unauthenticated PHP object injection lets attackers run codePackage2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Gamic WordPress theme: unauthenticated PHP object injection lets attackers run codeGamic - Gaming Metaverse Game & Crypto WordPress Theme (ThemeREX)Package2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Good Homes WordPress plugin: unauthenticated PHP object injection lets attackers run codePackage2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Gunslinger: unauthenticated PHP object injection in versions 1.11 and earlierGunslingerOther2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Zoho Flow: unauthenticated PHP object injection lets attackers run codePackage2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Motorix WordPress plugin: unauthenticated PHP object injection exposes sitesPackage2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Muzicon WordPress theme: unauthenticated PHP object injection lets attackers run codemuziconPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Nuts: unauthenticated PHP object injection lets attackers run codeNutsPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Orpheus WordPress theme: unauthenticated PHP object injection lets attackers run codeOrpheusRuntime2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Filmax WordPress theme: unauthenticated PHP object injection, cvss 9.8Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Avventure WordPress plugin: unauthenticated PHP object injection through 1.1.12Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Bonbon WordPress theme: unauthenticated PHP object injection, up to 1.11BonbonPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Coinpress: unauthenticated PHP object injection lets attackers run codeCoinpressPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Legal Stone WordPress plugin: unauthenticated PHP object injection before 1.2.12Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Le Truffe WordPress plugin: unauthenticated PHP object injection, versions 1.1.7 and belowLe Truffe (letruffe)Package2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Marcell WordPress theme: unauthenticated PHP object injection in old versionsMarcell - Personal Blog & MagazinePackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Meals & Wheels WordPress plugin: PHP object injection lets unauthenticated visitors run codePackage2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Mission WordPress plugin: unauthenticated PHP object injection up to 1.22missionPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0AjaxLoadMore Cache WordPress plugin: unauthenticated code execution on serversAjaxLoadMore CachePackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8GEO my WordPress plugin: unauthenticated PHP object injection through 4.5.5.3geo-my-wpPackage2026-10-29 16:18 UTCby InfraStack Analyst–FIX 4.5.5.4 CRITICAL9.8Preservation WordPress plugin: unauthenticated PHP object injection lets attackers run codepreservationPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8Ozisti WordPress plugin: unauthenticated PHP object injection lets attackers run codeOzistiPackage2026-10-29 16:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.8RexCoin WordPress plugin: unauthenticated PHP object injection up to 1.2.6Other2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Quirky WordPress plugin: unauthenticated PHP object injection up to 1.23Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.8Printy WordPress plugin: unauthenticated PHP object injection up to 1.13.0Package2026-10-29 16:18 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: public workflows can run stored Python components under owner's contextAI agents & MCP2026-10-29 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Frappe: file upload path traversal lets authenticated users run code on serverPackage2026-10-15 08:41 UTCby EPSS–WHAT TO DO CRITICAL9.1ZITADEL: unauthenticated attackers take over accounts lacking any login methodPackage2026-10-15 11:51 UTCby EPSS–WHAT TO DO HIGH7.7Crawl4AI: Docker API lets authenticated clients load malicious model, run codeAI agents & MCP2026-10-15 10:01 UTCby EPSS–WHAT TO DO MEDIUM5.3Crawl4AI: authenticated API users can run JavaScript in crawled pagesAI agents & MCP2026-10-15 10:01 UTCby EPSS–WHAT TO DO CRITICAL9.2OpenText Advanced Authentication Server: untrusted data lets attackers reach restricted functionsAdvanced Authentication ServerVendor2026-10-29 16:17 UTCby InfraStack Analyst–WHAT TO DO HIGH8.8Langflow: authenticated users can run arbitrary commands via code generationAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.3P-Net: crafted Connect request overflows buffer, enabling crash or code executionPackage2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: authenticated users can obtain sensitive credentials from insufficient protectionAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8Langflow: low-privileged user can run OS commands on serverAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8Langflow: low-privilege user can run code on the serverAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: authenticated users can read sensitive data stored in cleartextAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8Langflow: path traversal lets signed-in users read sensitive fileslangflowAI agents & MCP2026-10-29 16:17 UTCby InfraStack Analyst–FIX 1.12.5 HIGH7.5Langflow: improper authentication lets remote attackers obtain sensitive informationlangflowAI agents & MCP2026-10-29 16:17 UTCby InfraStack Analyst–FIX 1.12.5 MEDIUM6.5Langflow: authenticated users can read arbitrary files via directory traversalLangflow OSSAI agents & MCP2026-10-29 16:17 UTCby InfraStack Analyst–FIX 1.12.5 CRITICAL9.8Langflow: flaw in code generation lets remote attacker run code1 talkingAI agents & MCP2026-10-29 16:17 UTCby EPSS1talkingWHAT TO DO HIGH8.8Langflow: authenticated users can run OS commands on the serverAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.9Langflow: authenticated users can run arbitrary code through missing authorizationAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.9IBM Langflow: authenticated users can run arbitrary code via evalAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.9Langflow: authenticated users can run arbitrary code through code generationAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8Langflow: untrusted data deserialization lets an authenticated user run codeAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8Langflow: authenticated user can run OS commands on the serverAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM5.4Langflow: authenticated users can make the server send unauthorized requestsAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Langflow: OS command injection lets remote attackers run arbitrary codeAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM4.3Langflow: authenticated OS command injection enables denial of serviceAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: authenticated users can read files outside the allowed directoryAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM4.3Langflow: authenticated SSRF lets a user read internal server informationlangflowAI agents & MCP2026-10-29 16:17 UTCby InfraStack Analyst–FIX 1.12.4 LOW3.5Langflow: authenticated users can make ZIP archives with path traversal entriesAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: flow readers can retrieve owner's stored third-party credentialsAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM4.3Langflow: authenticated users can make the server send requests internallyAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM6.5Langflow: any logged-in user can cancel other users' running workflowsAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.1Langflow: message broker deserialization lets remote attacker run codelangflowAI agents & MCP2026-10-29 16:17 UTCby InfraStack Analyst–FIX 1.12.4 HIGH8.5Langflow: authenticated users can run arbitrary SQL commands remotelyAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO MEDIUM5.0Langflow: authenticated users can make server requests and read sensitive dataAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGH8.8IBM Langflow OSS: authenticated users can run arbitrary code remotelyAI agents & MCP2026-10-29 16:17 UTCby EPSS–WHAT TO DO HIGHCAMPAIGNEXPLOITEDAttackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)CMS camera management software (3R Global / kvision.ai)Vendor2026-10-27 13:00 UTCby InfraStack Analyst–WHAT TO DO HIGHCAMPAIGNEXPLOITEDYobaYobaLoaderFake ChatGPT and Claude desktop apps on GitHub (GPT-5.6 Sol, GPT-6 Astra, Claude Opus) use signed OpenAI/Anthropic installers to load Yoba malware and a crypto minerChatGPT DesktopAI agents & MCP2026-10-27 13:00 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-slot (npm)789bet-slotPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-vip-online-login (npm)789bet-vip-online-loginPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-vip (npm)789bet-vipPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-entrance (npm)789bet-entrancePackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-login-th (npm)789bet-login-thPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet-vip-login (npm)789bet-vip-loginPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 789bet (npm)789betPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in m98th (npm)m98thPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in m98vip (npm)m98vipPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in m98bet (npm)m98betPackage2026-10-29 15:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @pcb-dp/qa-commons (npm)@pcb-dp/qa-commonsPackage2026-10-29 15:32 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mobile-platform/magnetic-components (npm)@mobile-platform/magnetic-componentsPackage2026-10-29 15:19 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @jasperquinn/postcss-motion-helpers (npm)@jasperquinn/postcss-motion-helpersPackage2026-10-29 15:14 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in black-spindle-2 (npm)black-spindle-2Package2026-10-29 14:59 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in poc-revshell (PyPI)poc-revshellPackage2026-10-29 14:59 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in spectral-core (npm)spectral-corePackage2026-10-29 14:57 UTCby osv-malicious–UNINSTALL MEDIUMTECHNIQUEDATA EXPOSEDclaude-mem setup uploadclaude-mem installer (v15.2.0+) silently uploads the last 30 days of Claude Code, Codex, Gemini CLI and OpenCode prompts to cmem.ai, which passes them to unknown LLM providersclaude-memAI agents & MCP2026-10-29 13:56 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bcxhdh1kjlopsde (npm)bcxhdh1kjlopsdePackage2026-10-29 14:23 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in cjlowuxbnexkhgpzq (npm)cjlowuxbnexkhgpzqPackage2026-10-29 14:23 UTCby osv-malicious–UNINSTALL HIGH8.7llama.cpp RPC server: oversized message crashes the server for all clientsAI agents & MCP2026-10-29 14:17 UTCby EPSS–WHAT TO DO CRITICAL9.2Agno: unsafe reflection in PandasTools lets prompt injection run codeAI agents & MCP2026-10-29 14:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in monte-md-baileys (npm)monte-md-baileysPackage2026-10-29 13:34 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in noxleyss (npm)noxleyssPackage2026-10-29 13:33 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @rennnpm/baileys (npm)@rennnpm/baileysPackage2026-10-29 13:25 UTCby osv-malicious–UNINSTALL CRITICAL9.8Yamaha NWR100 wireless router: crafted request runs arbitrary OS commandsNWR100Infrastructure2026-10-29 12:17 UTCby InfraStack Analyst–FIX Rev.26.00.08 HIGH7.0OmniRoute: unverified password change lets API key holders take over dashboardAI agents & MCP2026-10-29 11:17 UTCby EPSS–WHAT TO DO HIGH8.5PUBLIC EXPLOITBuddyPress: blind SQL injection exposes site database to attackersPackage2026-10-29 11:17 UTCby EPSS–WHAT TO DO CRITICAL9.3StylemixThemes Motors WordPress theme: blind SQL injection lets attackers read databasemotors-car-dealership-classified-listingsRuntime2026-10-29 11:17 UTCby InfraStack Analyst–FIX 1.4.127 HIGHCAMPAIGNEXPLOITEDNIK C2nik_panelNIK C2: new Windows malware framework seen in the wild steals credentials, logs keystrokes, can lock screens for ransom, and uses the victim's own OpenAI API key to analyze stolen dataWindows1 talkingOther2026-10-29 10:00 UTCby InfraStack Analyst1talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-volcengine-provider (npm)dsh-volcengine-providerPackage2026-10-29 09:28 UTCby osv-malicious–UNINSTALL CRITICAL9.3Radius Xenia M2M Platform: SQL injection in password recovery exposes databaseInfrastructure2026-10-29 09:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in zystcdemo (npm)zystcdemoPackage2026-10-29 07:22 UTCby osv-malicious–UNINSTALL CRITICALNOT SCOREDWordPress Contact Form plugin: stored template injection runs server codePackage2026-10-29 06:17 UTCby EPSS–WHAT TO DO CRITICALNOT SCOREDChat AI with Dispatcher WordPress plugin: unauthenticated upload of PHP filesPackage2026-10-29 06:17 UTCby EPSS–WHAT TO DO CRITICALNOT SCOREDLogixFast Auth WordPress plugin: password reset code sent to attacker addressPackage2026-10-29 06:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-redteam-mode (npm)dsh-redteam-modePackage2026-10-29 05:23 UTCby osv-malicious–UNINSTALL CRITICAL9.8FUXA: unauthenticated HTTP request to /nodered runs arbitrary codeFUXAOther2026-07-22 18:44 UTCby InfraStack Analyst–FIX 1.3.3 CRITICAL9.8WordPress Telegram WooCommerce plugin lets anyone log in as any userPackage2026-10-29 04:18 UTCby EPSS–WHAT TO DO CRITICAL9.4openEQUELLA: scripting engine runs arbitrary OS commands for script editorsPackage2026-10-29 02:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @dmangal/curse-dependent-ecto (npm)@dmangal/curse-dependent-ectoPackage2026-10-29 00:06 UTCby osv-malicious–UNINSTALL HIGHTECHNIQUEEMBRACEBuilt-in browsers in AI coding assistants (Cursor, GitHub Copilot, Codex, VS Code, Claude Desktop) let a web page or local file run code, read the whole disk or fake the address bar; Codex and VS Code unpatched (EMBRACE)Codex1 talkingAI agents & MCP2026-10-29by InfraStack Analyst1talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @johnruff215-dev/solana-wallet-tracker (npm)@johnruff215-dev/solana-wallet-trackerPackage2026-10-29by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in litecore-lib-ltc (npm)litecore-lib-ltcPackage2026-10-29by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @notrainer/nobtrainer-sdk (npm)@notrainer/nobtrainer-sdkPackage2026-10-29by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in self-v8 (npm)self-v8Package2026-10-29by osv-malicious–UNINSTALL HIGHCAMPAIGNEXPLOITEDARTEXBLOODALCHEMYChina-linked VAPOR PANDA uses the ARTEX AI agent framework to break into 200+ government, pharma, defense and telecom organisations at once, then plants the BLOODALCHEMY backdoor3 talkingInfrastructure2026-10-29by InfraStack Analyst3talkingWHAT TO DO HIGHCAMPAIGNDATA EXPOSEDDebugBear RUM compromisePolymarket breached through an unnamed third-party provider: international users' wallets drained (about $2.7M), trading haltedPolymarket8 talkingVendor2026-10-29by InfraStack Analyst8talkingWHAT TO DO CRITICALCAMPAIGNEXPLOITEDC3RB3RCerberC3RB3R (Cerber) ransomware is encrypting internet-exposed Synology NAS devices and their backups; Synology confirms attacks on outdated DSMSynology DSM3 talkingVendor2026-10-29by InfraStack Analyst3talkingFIX 7.4-90075

Wednesday, Oct 28

CRITICAL10.0D-Link DIR-505 router: web CGI flaw lets remote attackers plant a backdoorInfrastructure2026-10-28 23:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in b20miner (npm)b20minerPackage2026-10-28 23:16 UTCby osv-malicious–UNINSTALL MEDIUMCAMPAIGNEXPLOITEDFake GrapheneOS download site (installgarphenos[.]ink) serves Mac malware as GrapheneOS.zipmacOSOther2026-10-28 22:10 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0AVideo: unauthenticated installer writes PHP config, enabling remote code executionPackage2026-06-22 14:47 UTCby EPSS–WHAT TO DO CRITICAL10.0AVideo: unauthenticated live-stream endpoint lets attackers run OS commandsPackage2026-06-22 14:59 UTCby EPSS–WHAT TO DO CRITICAL9.8Signal K Server: unauthenticated log download leaks keys, enabling full admin takeoverPackage2026-09-21 19:20 UTCby EPSS–WHAT TO DO HIGH8.6LangGraph JavaScript custom authentication may permit cross-user Store accesslanggraph-apiAI agents & MCP2026-09-28 14:44 UTCby EPSS–FIX 0.15.0 MEDIUM4.3LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestslanggraph-sdkAI agents & MCP2026-10-07 17:31 UTCby EPSS–FIX 0.4.6 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @zaip-ai/cli (npm)@zaip-ai/cliPackage2026-10-28 20:37 UTCby osv-malicious–UNINSTALL HIGH8.6EXPLOITEDCisco ASA and FTD: crafted SSL VPN request forces device reloadCisco Secure Firewall ASA Software and Cisco Secure FTD Software3 talkingInfrastructure2026-10-28 20:18 UTCby InfraStack Analyst3talkingWHAT TO DO CRITICAL9.4FearlessCMS: unauthenticated admin scripts allow file writes and site defacementOther2026-06-30 04:43 UTCby EPSS–WHAT TO DO HIGH8.6Gearboy: unauthenticated network MCP server lets peers control emulatorAI agents & MCP2026-06-12 19:49 UTCby EPSS–WHAT TO DO CRITICAL9.1ai-gateway-payload-processing: tenants can use other tenants' LLM API keysAI agents & MCP2026-10-28 20:17 UTCby EPSS–WHAT TO DO HIGH7.5n8n: Slack Trigger webhook lets unauthenticated attackers steal Slack tokensAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH8.4n8n: webhook error responses omit CSP, enabling stored cross-site scriptingAI agents & MCP2026-10-14 09:35 UTCby EPSS–WHAT TO DO HIGH8.7n8n: crafted workflow ID lets members access every project's Data Table rowsAI agents & MCP2026-10-14 09:35 UTCby EPSS–WHAT TO DO HIGH7.1n8n: workflow editors can read restricted credentials via sub-workflow loadingAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH7.1n8n: member users can run workflows with credentials they cannot accessAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO MEDIUM5.9n8n Local Gateway: deep link silently re-pairs to attacker instanceAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH7.1n8n: prototype pollution via workflow connection keys breaks logins and writesAI agents & MCP2026-10-14 09:34 UTCby EPSS–WHAT TO DO HIGH7.1n8n: authenticated members can exfiltrate credentials they lack access toAI agents & MCP2026-10-14 09:44 UTCby EPSS–WHAT TO DO HIGH8.2n8n: failed Git, MongoDB and GCS nodes leak credential secrets in execution dataAI agents & MCP2026-10-14 09:37 UTCby EPSS–WHAT TO DO HIGH7.7n8n: failed-workflow error handler inherits another user's identity and credentialsAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH8.7n8n: Quick Base node filter injection lets attackers read or delete all recordsAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH7.1n8n: crafted glob pattern lets a workflow member freeze the serverAI agents & MCP2026-10-14 09:36 UTCby EPSS–WHAT TO DO HIGH8.2n8n: SeaTable Trigger token leaks into execution logs for viewersAI agents & MCP2026-10-14 09:44 UTCby EPSS–WHAT TO DO MEDIUM5.4n8n: chat-only users can register restricted tools and run workflowsAI agents & MCP2026-10-14 09:43 UTCby EPSS–WHAT TO DO HIGH7.5n8n: OData filter injection in Outlook and SharePoint nodes exposes contactsAI agents & MCP2026-10-14 09:44 UTCby EPSS–WHAT TO DO CRITICAL9.2Sophos UTM: path traversal lets unauthenticated remote attackers run code as rootInfrastructure2026-10-28 19:17 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDchrome-devtools-mcp: policy flaw lets local attacker read and write filesAI agents & MCP2026-10-22 12:14 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in itsa-utils (npm)itsa-utilsPackage2026-10-28 18:25 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in itsa-react-checkbox (npm)itsa-react-checkboxPackage2026-10-28 18:23 UTCby osv-malicious–UNINSTALL CRITICALNOT SCOREDKafka: SASL/OAUTHBEARER broker accepts unsigned JWTs without a JWKS URLPackage2026-10-28 17:17 UTCby EPSS–WHAT TO DO CRITICAL9.8PUBLIC EXPLOITJuniper Session Smart Router: unauthenticated network attacker gains admin via URL parametersInfrastructure2026-10-28 17:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Juniper Session Smart Conductor: crafted salt minion ID runs root commandsInfrastructure2026-10-28 17:17 UTCby EPSS–WHAT TO DO HIGH7.7PUBLIC EXPLOITGrafana: contact point editors can redirect alerts and expose stored credentialsgrafanaOther2026-10-28 17:17 UTCby InfraStack Analyst–FIX 12.4.14 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in transaction-info-generate-sdk (npm)transaction-info-generate-sdkPackage2026-10-28 16:54 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in mock-transactions-sdk (npm)mock-transactions-sdkPackage2026-10-28 16:54 UTCby osv-malicious–UNINSTALL CRITICAL9.9XWiki Remote Macros: page editors can run code via excerpt-includePackage2026-06-21 19:03 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in black-spindle (npm)black-spindlePackage2026-10-28 16:15 UTCby osv-malicious–UNINSTALL MEDIUMCAMPAIGNEXPLOITEDSilver FoxKong RATFake DeepSeek desktop-app sites pushed through search results install Silver Fox remote-access malware that kills antivirusDeepSeek1 talkingAI agents & MCP2026-10-15by InfraStack Analyst1talkingWHAT TO DO CRITICAL9.8Ultimate Member WordPress plugin: object injection through untrusted data deserializationPackage2026-10-28 14:16 UTCby EPSS–WHAT TO DO CRITICAL9.4Wing FTP Server: user base folder check lets admins write files outside itPackage2026-10-28 14:16 UTCby EPSS–WHAT TO DO CRITICALINCIDENTGitHub: Disruption with some Copilot servicesGitHubVendor2026-10-28 14:12 UTCby status page–WHAT TO DO CRITICAL9.1HCL BigFix AEX: remote code execution lets attackers run codeBigFix AEXOther2026-10-28 13:17 UTCby InfraStack Analyst–FIX v14.0.0 HIGH7.1Telerik Document Processing: AI agent tools allow file read and overwriteAI agents & MCP2026-10-28 13:17 UTCby EPSS–WHAT TO DO CRITICAL9.6PUBLIC EXPLOITTopluyo Desktop for Linux: crafted link runs OS commands as userOther2026-10-27 16:00 UTCby EPSS–WHAT TO DO CRITICAL9.3FunnelKit Automations WordPress plugin: blind SQL injection through version 3.8.5.2Package2026-10-28 13:17 UTCby EPSS–WHAT TO DO CRITICAL9.3Crowd Favorite DXP ToolKit: SQL injection through version 2.0.1Other2026-10-28 13:17 UTCby EPSS–WHAT TO DO CRITICAL9.8KaliFast: Git remote endpoint lets a registered user run server commandsOther2026-10-28 12:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Eclipse Che machine-exec: unescaped username lets network attackers run commandsOther2026-10-28 12:17 UTCby EPSS–WHAT TO DO CRITICAL9.4NoviGest Desktop App: unauthenticated Java RMI service leaks credentials and runs OS commandsPackage2026-10-28 11:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Dell PowerProtect Data Domain: stack buffer overflow allows unauthenticated remote command executionInfrastructure2026-10-28 11:17 UTCby EPSS–WHAT TO DO CRITICAL9.6Dell PowerProtect Data Domain Management Center: SQL injection grants unauthorized access to managed systemsInfrastructure2026-10-28 11:17 UTCby EPSS–WHAT TO DO CRITICAL9.6Dell PowerProtect Data Domain Management Center: missing authorization lets low-privileged users actInfrastructure2026-10-28 11:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Dell PowerProtect Data Domain: hard-coded crypto key exposes credentials remotelyInfrastructure2026-10-28 10:17 UTCby EPSS–WHAT TO DO CRITICAL9.1Futurum Software management software: blind SQL injection exposes customer PIIVendor2026-10-28 10:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @zmtcdn/components (npm)@zmtcdn/componentsPackage2026-10-28 09:59 UTCby osv-malicious–UNINSTALL CRITICAL9.8Dell PowerProtect Data Domain: unauthenticated remote root command execution via authentication flawInfrastructure2026-10-28 09:17 UTCby EPSS–WHAT TO DO CRITICAL9.1Dell PowerProtect Data Domain Management Center: authentication bypass lets low-privilege users escalateInfrastructure2026-10-28 09:17 UTCby EPSS–WHAT TO DO CRITICAL9.8Dell PowerProtect Data Domain: unauthenticated remote attacker creates privileged accountsInfrastructure2026-10-28 09:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @zmtcdn/ui (npm)@zmtcdn/uiPackage2026-10-28 07:27 UTCby osv-malicious–UNINSTALL HIGH8.8PUBLIC EXPLOITWordPress IvyForms plugin: file upload accepts PHP files, enabling code executionPackage2026-10-28 07:16 UTCby EPSS–WHAT TO DO CRITICAL9.8WordPress Contact Manager plugin: unauthenticated arbitrary file upload via add_messagePackage2026-10-28 07:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in identity-two-factor (npm)identity-two-factorPackage2026-10-28 06:56 UTCby osv-malicious–UNINSTALL CRITICALNOT SCOREDPUBLIC EXPLOITCheckout Files Upload for WooCommerce: unauthenticated file upload leads to code executionPackage2026-10-28 06:16 UTCby EPSS–WHAT TO DO

Needs attention · last 7 days