CVE-2026-56852

creationtimestamp| type| source ---|---|--- 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j 2026-08-05 22:37:18+00:00| seen| https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48 2026-08-06 00:00:18+00:00| seen|...

CVE-2026-12860

creationtimestamp| type| source ---|---|--- 2026-08-03 11:46:51+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12860...

CVE-2026-12816

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12816 2026-08-04 09:28:17+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117036528234088485...

CVE-2024-17583

creationtimestamp| type| source ---|---|--- 2026-08-03 10:01:29+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3ms6ajm6jch2l...

Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5wp5-5229-5g6q. This link is maintained to preserve external references. Original Description In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to dis...

GHSA-PV39-QRFQ-G8GC Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5wp5-5229-5g6q. This link is maintained to preserve external references. Original Description In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to dis...

webpen

WebPen — Pentest Pocket Reference A static, in-depth web ap...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-0101

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:45+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-7777

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-5432

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:45+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-3030

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-12259 Improper Input Validation in nltk/nltk

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-18589

creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2fnayl2p 2026-08-03 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030402699172268 2026-08-03 07:30:32+00:00| seen|...

CVE-2026-18588

creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2eavwb2m...

CVE-2026-13586

creationtimestamp| type| source ---|---|--- 2026-08-03 06:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/exnxhhsnzqcnb 2026-08-03 11:48:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-13586...

CVE-2026-12803

creationtimestamp| type| source ---|---|--- 2026-08-03 06:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2igor6ykz2if6 2026-08-03 11:22:47+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12803 2026-08-04 09:28:17+00:00| seen|...

CVE-2026-7878

creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...

CVE-2026-6789

creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...