CVE-2026-45537

creationtimestamp| type| source ---|---|--- 2026-08-04 23:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msc5bssods2l 2026-08-05 00:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc7uzkyb62l 2026-08-05 03:22:39+00:00| seen|...

CVE-2026-67859

creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc4jvlu2y2z...

CVE-2026-67858

creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc4joirhy2n...

CVE-2026-67620

creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:02+00:00| seen| https://t.me/GithubRedTeam/96659 2026-08-05 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96659 2026-08-05 05:00:10+00:00| seen| Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc 2026-08-0...

CVE-2026-18817

creationtimestamp| type| source ---|---|--- 2026-08-04 22:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2e6gnr3bwti6t...

CVE-2026-70594

creationtimestamp| type| source ---|---|--- 2026-08-04 22:36:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6f6e3y6mttsbe 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...

GHSA-XM43-3M56-W3WF

creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...

CVE-2026-70593

creationtimestamp| type| source ---|---|--- 2026-08-04 22:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iw3rld4msreml 2026-08-05 02:31:21+00:00| seen| https://gist.github.com/alon710/8b519f2c594fb49b15bc37a85db39cf9...

CVE-2026-18816

creationtimestamp| type| source ---|---|--- 2026-08-04 22:24:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jfs3fmlt77amm...

CVE-2026-16793

creationtimestamp| type| source ---|---|--- 2026-08-04 22:21:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msc2dixf3i2n...

CVE-2026-45100

creationtimestamp| type| source ---|---|--- 2026-08-04 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbzwjdqcj2z...

CVE-2026-18813

creationtimestamp| type| source ---|---|--- 2026-08-04 21:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lkjejcezmnlb...

ILSpy v11.0-rc

ILSpy ILSpy is the open-source, cross-platform .NET assembly browser and decompiler. The desktop UI runs on Windows, Linux, and macOS built on Avalonia. Download: latest release | latest CI build master | Microsoft Store RTM versions only Decompiler Frontends Aside from the cross-platform desktop...

GHSA-3CG5-48J3-V4GV

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...

CVE-2026-66902

creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...

CVE-2026-66901

creationtimestamp| type| source ---|---|--- 2026-08-04 21:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3iwqm2chk7oin...

CVE-2026-70491

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...

CVE-2026-45538

creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...

CVE-2025-29296

creationtimestamp| type| source ---|---|--- 2026-08-04 21:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l...

Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints

Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticated non-admin who could use a shared tool could also read its source, including any user on the instance when a tool was shared publicly. Source is meant to be a writer-only tier: the...