CVE-2026-54722

creationtimestamp| type| source ---|---|--- 2026-07-30 17:08:56+00:00| seen| https://bsky.app/profile/kynth.studio/post/3mruwkbv7zy2r 2026-07-30 18:31:07+00:00| seen| https://gist.github.com/alon710/a4455529dbdac06b73f9e7a68363941a 2026-07-30 18:35:06+00:00| published-proof-of-concept|...

shannon v2.1.0

!NOTE Shannon 2.0 is officially here Shannon - AI Pentester by Keygraph Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes real exploits to prove vulnerabilities before they reach production. This repository is...

CVE-2026-28323

creationtimestamp| type| source ---|---|--- 2026-07-30 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvtcjthk2z 2026-07-31 02:53:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrvx7w6dy72z 2026-07-31 16:45:13+00:00| seen|...

SUSE CVE-2026-39961

Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace - production database credentials, API keys...

CVE-2026-4978

creationtimestamp| type| source ---|---|--- 2026-07-30 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvppv5ys2z...

CVE-2026-11707

creationtimestamp| type| source ---|---|--- 2026-07-30 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvprg2zw2i...

SUSE CVE-2026-41571

Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt"null" placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password:...

GHSA-4RCQ-JV2F-898J

creationtimestamp| type| source ---|---|--- 2026-07-30 16:49:58+00:00| seen| https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92 2026-07-30 19:33:45+00:00| seen| https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d 2026-07-30 19:34:08+00:00| seen|...

GHSA-VW27-FWJF-5QXM

creationtimestamp| type| source ---|---|--- 2026-07-30 16:49:48+00:00| seen| https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92 2026-07-30 19:33:36+00:00| seen| https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d 2026-07-30 19:33:48+00:00| seen|...

CVE-2026-13435 Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

SUSE CVE-2026-45327

TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the issue by requiring either HTTP Basic auth or a ?password= query parameter, comparing the supplied...

minder v0.3.0

| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...

SUSE CVE-2026-63872

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-PGWH-4JJ4-QM8V

creationtimestamp| type| source ---|---|--- 2026-07-30 16:30:59+00:00| seen| https://gist.github.com/alon710/abbfb678b2ea15b959183e89124a0f42...

CVE-2026-57862

creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ilw4ytaebzud5...

CVE-2026-67346

creationtimestamp| type| source ---|---|--- 2026-07-30 15:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6y3reb6zoq65d...

CVE-2026-53431

creationtimestamp| type| source ---|---|--- 2026-07-30 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrurapjhtq2v...

GHSA-C9HR-64H3-GXPC

creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8...

CVE-2026-67424

creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8 2026-07-30 16:35:03+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-c9hr-64h3-gxpc...

hate_crack v2.18.0

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...