curl: 36: HTTP upload resume offset consumed twice after early 307/308 redirect

Summary A read-backed HTTP POST using CURLOPTRESUMEFROMLARGE with a non-seekable source silently uploads the wrong data when the server returns a 307 or 308 redirect before the request body is sent. curleasyperform returns CURLEOK, so the caller cannot detect the substitution. The bug is in...

crowdsec v1.8.0-rc2

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

CVE-2026-81035

creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/anvxu5rxth3qo...

CVE-2026-81034

creationtimestamp| type| source ---|---|--- 2026-08-26 16:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5btja4khie34t...

CVE-2026-75062

creationtimestamp| type| source ---|---|--- 2026-08-26 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtyptvornt23 2026-08-26 18:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywfxuqju2e...

CVE-2026-74848

creationtimestamp| type| source ---|---|--- 2026-08-26 15:37:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/isgyihvqh5n7s 2026-08-27 10:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jciqmqkiujfkw...

infisical v0.162.24

The open-source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Slack | Infisical Cloud | Self-Hosting | Docs | Website | Twitter | Hiring Remote/SF Introduction Infisical is the open source security infrastructure platform that teams us...

CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-18080

creationtimestamp| type| source ---|---|--- 2026-08-26 12:21:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy52s6sgxysq2 2026-08-26 12:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtye4fhhlk2e 2026-08-26 23:00:03+00:00| published-proof-of-concept|...

CVE-2026-77551

creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtybuvhrho24 2026-08-27 07:00:03+00:00| seen| https://t.me/GithubRedTeam/99900 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LI...

pentx-vapt-skill

Pentx — AI-Powered 5-Phase VAPT Agent Pentx is an open-so...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an improper Unicode handling vulnerability due to Python setuptools

Summary Python setuptools is used by IBM Integrated Analytics System as a package management library for downloading, building, installing, and managing Python packages. CVE-2026-59890 affects setuptools versions prior to 83.0.0, where the FileList class applies MANIFEST.in exclusion directives b...

CVE-2026-77536

creationtimestamp| type| source ---|---|--- 2026-08-26 10:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty4tyavgg25...

CVE-2026-77535

creationtimestamp| type| source ---|---|--- 2026-08-26 10:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty4twt23d2c...

CVE-2026-80233

creationtimestamp| type| source ---|---|--- 2026-08-26 08:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cn4yvwzcxyxdw...

CVE-2026-75977

creationtimestamp| type| source ---|---|--- 2026-08-26 08:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ekxwks5uch6se...

CVE-2026-18884

creationtimestamp| type| source ---|---|--- 2026-08-26 08:33:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idnghdq4gxg5t...

CVE-2026-65641

creationtimestamp| type| source ---|---|--- 2026-08-26 08:32:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtxwcgg72o2v 2026-08-26 12:35:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtpmdku2x 2026-08-26 22:58:41+00:00| seen|...

CVE-2026-63041

creationtimestamp| type| source ---|---|--- 2026-08-26 06:17:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dmr65cizrr3hf 2026-08-26 12:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g3x5tys4m5sfr...

CVE-2026-77757

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...