CVE-2026-64837

creationtimestamp| type| source ---|---|--- 2026-09-11 05:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkbexcy2n...

CVE-2026-84388

creationtimestamp| type| source ---|---|--- 2026-09-11 05:02:12+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mv7ryeh2zy2m 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r 2026-09-16 08:45:07+00:00| seen|...

CVE-2026-89092

creationtimestamp| type| source ---|---|--- 2026-09-11 04:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/em52ptcnayfpv 2026-10-07 04:42:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxb4zpkp3423 2026-10-08 07:23:22+00:00| seen|...

CVE-2026-89145

creationtimestamp| type| source ---|---|--- 2026-09-11 03:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5chi4qez6ikrd...

CVE-2026-16338

creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...

authentik version/2026.8.2

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

EUVD-2026-75871

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-81906

creationtimestamp| type| source ---|---|--- 2026-09-11 00:10:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bf25zvsv4hp4y...

CVE-2026-16174

creationtimestamp| type| source ---|---|--- 2026-09-11 00:08:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6xwrwmoocjmm3...

Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary

Function renaming in stripped binaries can substantially assist reverse engineers by improving code readability, yet it is a challenging task. The difficulty stems from the need to accurately capture function semantics from low-level binary code across diverse instruction sets, architectures, and...

ROS-20260911-73-0219

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

PT-2026-89855

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

ROS-20260911-73-0221

The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

CVE-2026-89252: Authorization Bypass Through User-Controlled Key

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

ROS-20260911-73-0143

The vulnerability of the Autofill component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260911-73-0207

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a data source confirmation error. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

ROS-20260911-73-0241

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260911-73-0243

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ROS-20260911-73-0141

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML...