CVE-2026-23596

creationtimestamp| type| source ---|---|--- 2026-02-11 13:55:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmwllbwu2m 2026-02-14 16:33:57+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3meth6wmixu2p...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005344 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...

CVE-2026-20119

creationtimestamp| type| source ---|---|--- 2026-02-04 17:17:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2exdj4nq22 2026-02-04 18:13:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2i4jflbf2h 2026-02-05 14:55:12+00:00| seen|...

CVE-2026-25223

creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfetewlo2h...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24728

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability exists in Interinfo DreamMaker’s file upload function, affecting versions before 2025/10/22. The root cause is an insufficient validation of uploaded files, enabling remote attackers to execute arbitrary system commands via a malici...

EUVD-2026-5017

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24729 Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24728

The vulnerability CVE-2026-24728 affects Interinfo DreamMaker, specifically the /servlet/baServer3 endpoint. A missing authentication for a critical function allows remote attackers to access exposed administrative functionality without prior authentication in DreamMaker versions before 2025/10/2...

EUVD-2026-5016

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

PT-2026-5377

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

CVE-2026-0750

creationtimestamp| type| source ---|---|--- 2026-01-28 22:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjbijauap2j...

SUSE-SU-2026:0301-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion bsc1256848 - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks that bypass TLS error handling and causing...

CVE-2026-1427

creationtimestamp| type| source ---|---|--- 2026-01-26 07:33:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10655-59160-2.html 2026-01-26 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdcuydgw3f2m 2026-01-26 09:58:34+00:00| seen|...

GHSA-2P49-45HJ-7MC9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:59+00:00| seen| https://gist.github.com/alon710/4b217fe2cf8ffb61c81cdbc3ae7afb81 2026-01-24 22:19:21+00:00| seen| https://gist.github.com/alon710/a4941f2432a88ce8da6f5f32e199afb8 2026-01-24 22:19:24+00:00| seen|...

CVE-2026-24307

creationtimestamp| type| source ---|---|--- 2026-01-22 23:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dmgtemf2x 2026-01-23 00:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2gzhkj6a2i 2026-02-13 04:55:22+00:00| seen|...

CVE-2026-23988

creationtimestamp| type| source ---|---|--- 2026-01-22 23:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2d52s3d72m 2026-01-26 05:56:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdckp57poa2w 2026-01-26 14:35:32+00:00| seen|...

CVE-2026-20888

creationtimestamp| type| source ---|---|--- 2026-01-22 23:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2cn4pklo2n 2026-01-24 21:22:10+00:00| seen| https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1 2026-05-13 05:04:19+00:00| seen|...