CVE-2026-8239

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:14+00:00| seen| Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM 2026-09-03 00:00:43+00:00| published-proof-of-concept| Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM...

CVE-2023-46014

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:13+00:00| seen| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo 2026-09-03 00:00:53+00:00| published-proof-of-concept| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo...

CVE-2021-21423

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:13+00:00| seen| Telegram/I58s2uZmAQqrY0Sc2SLCSg9yo3yGDFMC-JsGWGbcm0eZ9o 2026-09-03 00:00:43+00:00| published-proof-of-concept| Telegram/I58s2uZmAQqrY0Sc2SLCSg9yo3yGDFMC-JsGWGbcm0eZ9o...

CVE-2023-41564

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-03 00:00:54+00:00| published-proof-of-concept| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-18 04:00:08+00:00| seen|...

CVE-2018-18778

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs 2026-09-03 00:00:55+00:00| published-proof-of-concept| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs...

CVE-2023-20918

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:10+00:00| seen| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs 2026-09-03 00:00:55+00:00| published-proof-of-concept| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs...

CVE-2025-52399

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:08+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:56+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...

CVE-2019-14439

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:07+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:57+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...

CVE-2024-35585

Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...

CVE-2026-19475: Uncontrolled Resource Consumption

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

EUVD-2024-55746

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2024-35585: Missing Authentication for Critical Function

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

PT-2026-84757

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 12.4.10-1.1 Description An authenticated user with permissions to query a SQL data source can cause a denial of service by injecting the timeGroup macro through a WHERE clause. Because the regex-based macro parsing do...

PT-2026-84735

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

DeviceBoundSessionCredentials Confidential Data Access

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML...

Password Component Access Confidential Data

The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CSS components compromise Data Compromise

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...