CVE-2026-66583

creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkfcfze2m 2026-08-20 14:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7f6rkp2t...

CLSA-2026-1787224839 TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.2-tuxcare.1...

prowler v5.35.0

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

WordPress ECS plugin < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability

Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability discovered by Erwan LR WPScan in WordPress Plugin ECS – Ele Custom Skin for Elementor versions 4.3.10...

akto v2.20.1

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

arkime v6.7.0

Arkime Arkime is a large scale, open-source network analysis and packet capture system. Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP...

zaproxy w2026-08-19

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

opencode v1.18.19

The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...

Rocket.Chat v8.7.1

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

CVE-2026-76070

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:05+00:00| seen...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-organizations, crossplane-provider-aws-pinpoint, crossplane-provider-aws-scheduler, crossplane-provider-aws-fis-fips, crossplane-provider-aws-codestarnotifications, crossplane-provider-aws-cloudfront-fips, crossplane-provider-aws-inspector,...

CVE-2025-36254

creationtimestamp| type| source ---|---|--- 2026-08-20 01:44:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mti4ojymxa2n...

CVE-2026-76886

creationtimestamp| type| source ---|---|--- 2026-08-20 01:04:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mti2h7jbye27 2026-08-24 17:00:04+00:00| seen| https://t.me/bdufstecru/3404 2026-08-25 00:00:22+00:00| seen| https://t.me/bdufstecru/3404 2026-09-03 22:35:01+00:00|...

The Software Supply Chain As a Market for Lemons: A Multivocal Review of Trust Signal Collapse

Practitioners evaluating open-source dependencies rely on cheap trust signals, e.g., stars, download counts, and contributor activity, as substitutes for direct code inspection, assuming those signals reflect genuine trustworthiness. Prior work has documented individual signal gaming, but the...

PT-2026-79045

Name of the Vulnerable Software and Affected Versions Apache InLong versions 2.0.0 through 2.3.x Description An issue exists where StreamSource performs no authorization check, allowing any authenticated user to logically delete all stream sources. Recommendations Upgrade to version 2.4.0...

A Case-Control Measurement Study of OSINT Source Effectiveness for Critical Infrastructure Defense

Defenders of critical infrastructure CI subscribe to many public open-source intelligence OSINT feeds without an empirical basis for which feeds actually precede attacks. We provide one. Across 54 confirmed CI cyberattacks from 2010 through 2024 spanning twelve named CI sectors plus a cross-secto...

MaliciousSkillBench: A Comprehensive Benchmark for Malicious Agent Skill Detection

Agent Skills extend LLM agents with reusable instruction packages that may also include scripts, resources, and service configuration. This creates a direct distribution channel for malicious behavior, yet existing malicious-Skill datasets are fragmented across sources, artifact formats, evidence...

CVE-2026-76989: Out-of-bounds Read

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

PT-2026-79061

Name of the Vulnerable Software and Affected Versions VictoriaMetrics versions prior to 1.122.25 VictoriaMetrics versions prior to 1.136.12 VictoriaMetrics versions prior to 1.146.0 Description The vmrestore tool fails to validate backup part path components before writing restored data below...

PT-2026-79144

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description Applications that define unusual custom sources and process untrusted uncompressed PPM images can trigger a max/min error in the vips source read to memory function within libvips/iofuncs/source.c...