CVE-2026-81335

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

SUSE CVE-2026-62326

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

CVE-2026-50787

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ 2026-08-28 00:00:35+00:00| published-proof-of-concept| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ...

OpenClaw went viral. Meet the maintainers building and securing it.

What began as a personal experiment quickly became a global open source project with extraordinary momentum. OpenClaw is a personal AI assistant that runs on users' devices and connects with the messaging channels they already use. Started by Peter Steinberger as a weekend project in November 202...

CVE-2026-27797

creationtimestamp| type| source ---|---|--- 2026-08-27 15:00:12+00:00| seen| https://t.me/cve0day/276 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/276 2026-08-29 00:00:30+00:00| published-proof-of-concept| https://t.me/cve0day/276...

CVE-2026-27579

creationtimestamp| type| source ---|---|--- 2026-08-27 15:00:12+00:00| seen| https://t.me/cve0day/257 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/257 2026-08-29 00:00:30+00:00| published-proof-of-concept| https://t.me/cve0day/257...

CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

EUVD-2026-67032

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81676

creationtimestamp| type| source ---|---|--- 2026-08-27 14:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jqohkgsvhvttq...

CVE-2026-81753

creationtimestamp| type| source ---|---|--- 2026-08-27 14:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sc7a3hgymhag...

CVE-2026-81814

creationtimestamp| type| source ---|---|--- 2026-08-27 14:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/absbmm7v5yzuz...

CVE-2026-81662

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-32479

creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2sqlkaaa2m 2026-08-28 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4mzd3fc72e...

CVE-2017-7092

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-28 00:00:54+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-29 00:00:16+00:00| published-proof-of-concept|...

CVE-2021-1480

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-28 00:00:53+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-29 00:00:16+00:00| published-proof-of-concept|...

CVE-2026-62958

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:09+00:00| seen| Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo 2026-08-28 00:00:52+00:00| seen| Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo 2026-08-29 00:00:27+00:00| published-proof-of-concept|...

CVE-2025-69515

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:05+00:00| seen| Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg 2026-08-28 00:00:45+00:00| published-proof-of-concept| Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg...

CVE-2026-73646

A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted sourceMappingURL values in untrusted CSS files. This allows the attacker to disclose sensitive sourcesContent from arbitrary .map files accessible on the system, leading to informati...

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...