Recent Advisories

Severity ID Title Vendor Product Date Type
NONE THN:4F197FF556F...

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm_THN:4F197FF556F916E3B86A5FBAB335549D

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOyc2NTiIl0XKOTZBsFh1bTPqNpVXfDhASWkCsYz17d-nbiWVKlxCzoq3WthMD8kMomrRPPOYLM-XRmSdtXN...

N/A N/A THN
NONE PACKETSTORM:222360

📄 dmonitor 1.0.3 Server-Side Request Forgery / Redis Enumeration_PACKETSTORM:222360

Proof of concept demonstration exploit for dmonitor version 1.0.3 that leverages an unauthenticated server-side request forgery vulnerability to de...

N/A N/A PACKETSTORM
NONE PACKETSTORM:222345

📄 Notepad++ 8.9.6 Arbitrary Code Execution_PACKETSTORM:222345

Notepad++ versions 8.9.6 and below proof of concept arbitrary code execution exploit...

N/A N/A PACKETSTORM
NONE PACKETSTORM:222361

📄 dwol 1.0.0 Command Injection_PACKETSTORM:222361

This Python script is a security auditing tool designed to assess a potential unauthenticated command injection vulnerability in dwol. It interacts...

N/A N/A PACKETSTORM
NONE PACKETSTORM:222328

📄 dwatch 0.0.2 SSRF Boundary and Network Isolation Audit Tool_PACKETSTORM:222328

This is an auditing tool to analyze server-side request forgery vulnerabilities in dwatch version 0.0.2...

N/A N/A PACKETSTORM
NONE B56188A7-EAE7-

signal-echo-radar_B56188A7-EAE7-500E-B432-8DBC8CB3C2E0

Signal Echo Radar Signal Echo Radar is a static cybersecurity radar that compresses duplicate vulnerability chatter into a single signal. Instead o...

N/A N/A GITHUBEXPLOIT
NONE AA426892-2C2F-

CVE-2026-ThreemaWeb-PrototypePollution_AA426892-2C2F-595E-8F61-7F32051099EC

CVE-2026-XXXXX: Threema Web Prototype Pollution via URI Query Parameter Parsing Overview | Field | Value | |-------|-------| | Product | Threema We...

N/A N/A GITHUBEXPLOIT
NONE 86548C8A-BFA5-

CVE-2026-BetterSQLCipher-RCE_86548C8A-BFA5-5FB9-8ADF-04EA886C261B

CVE-2026-XXXXX: better-sqlcipher loadExtension Remote Code Execution Overview | Field | Value | |-------|-------| | Product | better-sqlcipher | | ...

N/A N/A GITHUBEXPLOIT
NONE TRENDMICROBLOG:...

Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI’s Biggest AI Showdown Yet_TRENDMICROBLOG:127FB8AA6D6D15531363CF4A27AD695A

47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.

N/A N/A TRENDMICROBLOG
NONE MALWAREBYTES:29...

Fake BlueWallet steals passwords, accounts, and crypto from Macs_MALWAREBYTES:29F11C36E3CA6818B49525D6546FD4BA

A fake website impersonating BlueWallet (a real Bitcoin wallet) is targeting Mac users with a simple but effective attack. BlueWallet itself has no...

N/A N/A MALWAREBYTES