CVE-2026-86240 liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...

PT-2026-86875

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

PT-2026-86592

Name of the Vulnerable Software and Affected Versions liufee FeehiCMS versions prior to 2.1.2 Description A server-side request forgery exists in the UEditor component within the catchImage function of the backend/widgets/ueditor/Uploader.php file. A remote attacker can exploit this by manipulati...

The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

ROS-20260907-73-0093

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-86503: Server-Side Request Forgery (SSRF)

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86315: Numeric Truncation Error

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is aware of CVE-2026-75650 being exploited in the wild...

Crow-Eye v0.13.0

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

SUSE-SU-2026:23635-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

OPENSUSE-SU-2026:21778-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

CVE-2026-43626

creationtimestamp| type| source ---|---|--- 2026-09-06 14:00:05+00:00| seen| https://t.me/hackingAttack/192751 2026-09-07 01:00:13+00:00| seen| https://t.me/hackingAttack/192751...

FoxStryker_Scanner

🦊 FoxStryker — Advanced Web Vulnerability Scanner v3.0 FoxStr...

PyRIT v1.1.0

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. Check out our website for more information...

CVE-2023-41535

creationtimestamp| type| source ---|---|--- 2026-09-06 08:00:05+00:00| seen| Telegram/Paai8v2i2Qd7G7nDplu7cFbsNhfwUMGp9ainn2A0yNNLhsA 2026-09-07 01:00:27+00:00| published-proof-of-concept| Telegram/Paai8v2i2Qd7G7nDplu7cFbsNhfwUMGp9ainn2A0yNNLhsA...

CVE-2026-37071

creationtimestamp| type| source ---|---|--- 2026-09-06 08:00:05+00:00| seen| Telegram/szyQ0EKVUVNdmkffaO0C1PUabx9T7NbddNvq3q85HonyM 2026-09-07 01:00:25+00:00| published-proof-of-concept| Telegram/szyQ0EKVUVNdmkffaO0C1PUabx9T7NbddNvq3q85HonyM...

CVE-2026-86167

creationtimestamp| type| source ---|---|--- 2026-09-06 05:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mut7jydmri2j 2026-09-06 05:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2w6vkimf37bns 2026-09-06 10:47:55+00:00| seen|...

Magisk v31.0

This is not an officially supported Google product Introduction Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0. Some highlight features: MagiskSU : Provide root access for applications Magisk Modules : Modify read-only partitions by...

A Queryable Graph-Based Security Analysis Framework for O-RAN

The Open Radio Access Network O-RAN replaces vendor-locked RANs with a modular and interoperable architecture that fosters competition and accelerates innovation. With this openness comes increased complexity and a larger attack surface, making security a critical concern. Today, assessing O-RAN...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053424 advisory. In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: validate source addr length I don't see anything checking that TCPMETRICSATTRSADDRIPV...