CVE-2025-71399

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...

CVE-2026-14864

creationtimestamp| type| source ---|---|--- 2026-08-02 11:34:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3vbkl2dd24...

porterminal v1.0.6

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

CVE-2026-67291

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oiob3iy2t...

Linux Distros Unpatched Vulnerability : CVE-2026-67338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata...

CVE-2026-67298

creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n...

Exploit for CVE-2025-10897

CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...

CVE-2026-67305

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwrfkiw2h 2026-08-05 02:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msciabr6c623...

CVE-2026-67289

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140 2026-08-05 02:24:03+00:00| seen|...

CVE-2026-67327

creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22emobp22t 2026-08-01 22:18:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iruraca22 2026-08-01 22:19:08+00:00| seen|...

CVE-2026-17580

creationtimestamp| type| source ---|---|--- 2026-08-01 17:53:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzymh7nm25 2026-08-01 18:45:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24u4wgky2x 2026-08-01 18:45:08+00:00| seen|...

CVE-2026-16090

creationtimestamp| type| source ---|---|--- 2026-08-01 17:37:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz32c2n52x 2026-08-01 18:58:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms25lk44th2p...

CVE-2026-2916

creationtimestamp| type| source ---|---|--- 2026-08-01 17:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxns7zhq24...

Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...

GHSA-M4F3-G4CQ-HQRX Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...

GHSA-8VR5-263F-X5R3

creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d...

Improper Input Validation

free5GC is vulnerable to Improper Input Validation. The vulnerability is due to the AUSF failing to validate the supiOrSuci field in UE authentication requests before forwarding it in an unescaped URL path, which allows an unauthenticated attacker to send crafted input containing null bytes or...

CVE-2026-18536

creationtimestamp| type| source ---|---|--- 2026-08-01 14:31:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3j3jbe6z3bfgg 2026-08-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2dcdmekf24 2026-08-01 20:40:58+00:00| seen|...

CVE-2026-67352

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...

CVE-2026-67333

better-auth before 1.6.13 and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3 fail to validate the scheme of redirecturis registered via the deprecated oidc-provider plugin and the mcp plugin which wraps the same provider. An attacker can register an OAuth client with a javascript:...