PT-2026-48564

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-49 ImageMagick versions prior to 7.1.2-24 Description A crafted MVG file can cause a stack overflow because of a missing depth or visited-set check. MVG Magick Vector Graphics is a vector graphics format us...

SUSE-SU-2026:21899-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_24

This update for kernel-livepatch-MICRO-6-0-RTUpdate24 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 24...

CVE-2026-48132

creationtimestamp| type| source ---|---|--- 2026-05-26 15:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcgal5mv2i 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...

Node.js: Permission Model: --allow-fs-read/--allow-fs-write radix-tree prefix-boundary over-grant

A flaw was discovered in the Node.js Permission Model's enforcement of filesystem access control. The vulnerability could allow an attacker granted access to one path to read from or write to paths outside the intended filesystem allowlist, due to issues with the radix-tree prefix-boundary...

CVE-2026-38908

creationtimestamp| type| source ---|---|--- 2026-05-24 14:57:32+00:00| seen| https://gist.github.com/iamthana/e5d36a822218cf8e659c4de041a3c32d...

CVE-2026-9382

creationtimestamp| type| source ---|---|--- 2026-05-24 06:12:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116628070847937066 2026-09-29 12:47:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

CVE-2026-3515

creationtimestamp| type| source ---|---|--- 2026-05-24 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmlbxbir4d2m 2026-05-24 06:03:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116628024514004193 2026-06-06 11:02:50+00:00| seen|...

CVE-2026-9346

creationtimestamp| type| source ---|---|--- 2026-05-24 03:02:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116627316698106126...

CVE-2026-9294

creationtimestamp| type| source ---|---|--- 2026-05-24 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626962874841105...

CVE-2026-9295

creationtimestamp| type| source ---|---|--- 2026-05-24 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626609621458470...

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users. The activity, per HUMAN's Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-contr...

PT-2026-41780

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds over-read of 24 bytes can occur when performing a polynomial distortion if specific arguments are specified...

MinIO 路径遍历漏洞

MinIO is an open-source object storage server developed by the American company MinIO. This product supports the creation of infrastructures for machine learning, analysis, and application data workloads. Versions of MinIO from RELEASE.2022-07-24T01-54-52Z to RELEASE.2026-04-14T21-32-45Z had a pa...

CVE-2026-7891

creationtimestamp| type| source ---|---|--- 2026-05-07 23:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlceez7izf2i 2026-05-08 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116536365967570800 2026-05-08 01:30:29+00:00| seen|...

EUVD-2025-209711

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One...

CVE-2025-2514 Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One...

CVE-2025-9661 OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

OS command injection vulneravility in the management gui maintenance utility of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00...

CVE-2025-9661

Summary: CVE-2025-9661: OS command injection in the management GUI (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28. Affected products/versions: Hitachi VSP One Block 23, 24, 26 and 28 (before DKCMAIN A3-04-21-40/00 and ESM A3-04-21/00). Vulnerability: OS command in...

CVE-2026-40171

creationtimestamp| type| source ---|---|--- 2026-05-07 01:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla3darxz22t...

PT-2026-38349

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual...