CVE-2026-76205

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405...

CVE-2026-78331

creationtimestamp| type| source ---|---|--- 2026-08-24 16:26:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4hnchb7mbb6ai...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...

CVE-2026-66670

creationtimestamp| type| source ---|---|--- 2026-08-24 12:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3pcp5kdmolbs4...

CVE-2026-14668

creationtimestamp| type| source ---|---|--- 2026-08-24 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mttbdmkr4h23...

CVE-2026-17250

creationtimestamp| type| source ---|---|--- 2026-08-24 11:02:25+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtt5pwjv6u22...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ovl: Use the “buf” flexible array as the destination for memcpy. The “buf” flexible array must be used as the destination for memcpy to avoid false positive run-time warnings caused by the recent FORTIFYSOURCE hardening measures:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdccrtcsetcrcsource, the struct drmcrtc was dereferenced before the pointer check by the containerof function. This could cause a kernel panic. Fix this “match warning”:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: misc: lis3lv02di2c: Fixed the issue where regulators were disabled twice during suspension/resumption. When lis3lv02di2csuspend is not configured for wakeup, it will call lis3lv02dpoweroff, even if the device has already been...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net: mscc: ocelot section, there was an issue where the IFH SRCPORT field in ocelotifhsetbasic was incorrectly set. Packets injected by the CPU should have the SRCPORT field equal to the CPU port module index in the Analyz...

CVE-2022-20465115

creationtimestamp| type| source ---|---|--- 2026-08-24 10:00:03+00:00| seen| https://t.me/xhqcankao/3842 2026-08-25 00:00:24+00:00| seen| https://t.me/xhqcankao/3842...

CVE-2026-78201

creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...

CVE-2026-78211

creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...

PT-2026-80895

RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...

The vulnerability of the Unbound DNS server, related to deficiencies in the data source verification mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Unbound DNS server is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Grafana OSS: Stored XSS via external Alertmanager generatorURL

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL . The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

The vulnerability of the JAR component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows a hacker to induce a service failure.

The vulnerability of the JAR component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a deficiency in the source verification mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-79841

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...

Dark-Moon v1.3.1

The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...

hoverfly v1.12.12

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...