CVE-2026-18901

creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5oiwmrl2g...

CVE-2026-18900

creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5nfsevf2u...

CVE-2026-53944

creationtimestamp| type| source ---|---|--- 2026-08-05 08:32:27+00:00| seen| https://gist.github.com/alon710/489e9ca002ac3cb955fb509b828c43ec...

GHSA-WVP2-4QQP-4H3R

creationtimestamp| type| source ---|---|--- 2026-08-05 08:32:27+00:00| seen| https://gist.github.com/alon710/489e9ca002ac3cb955fb509b828c43ec...

CVE-2026-49004

creationtimestamp| type| source ---|---|--- 2026-08-05 08:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd2vkjz6t2u...

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK's AI Security Institute. When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritt...

GHSA-CH52-PX8Q-F22J

creationtimestamp| type| source ---|---|--- 2026-08-05 07:31:31+00:00| seen| https://gist.github.com/alon710/e46f39ae43e3fffa5ce1183a133d472c...

CVE-2026-53945

creationtimestamp| type| source ---|---|--- 2026-08-05 07:31:31+00:00| seen| https://gist.github.com/alon710/e46f39ae43e3fffa5ce1183a133d472c...

CVE-2026-17532

creationtimestamp| type| source ---|---|--- 2026-08-05 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96706 2026-08-05 10:00:05+00:00| published-proof-of-concept| Telegram/Nl8mRngxmNEif6AAKsIvUzhnsF325qswadlkhxgWlmwB0s 2026-08-05 21:00:04+00:00| seen|...

CVE-2026-71202

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...

EUVD-2026-53199

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...

CVE-2026-5062

creationtimestamp| type| source ---|---|--- 2026-08-05 06:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp 2026-08-06 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23...

GHSA-G366-23FW-GGP6

creationtimestamp| type| source ---|---|--- 2026-08-05 06:32:52+00:00| seen| https://gist.github.com/alon710/12c62bdb45c24ef118204a5bc7818a85...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2020-5895

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/882 2026-08-06 00:00:51+00:00| exploited| https://t.me/timcorehacking/882...

GHSA-JM22-3W23-5Q7W

creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...

CVE-2026-70590

creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...