CVE-2026-63637

creationtimestamp| type| source ---|---|--- 2026-08-10 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msovkxeczc27...

PT-2026-69391

Name of the Vulnerable Software and Affected Versions AppLock versions prior to SMR Aug-2026 Release 1 Description Improper export of android application components allows physical attackers to bypass the app lock function. Recommendations Update to SMR Aug-2026 Release 1...

CVE-2026-72871: Missing Authentication for Critical Function

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/setup.ts trusts ghinit organizationId and userId values from the state parameter and calls createGithub in...

CVE-2026-72916: Server-Side Request Forgery (SSRF)

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, PrivateAddressCheck.privateaddress? in app/lib/privateaddresscheck.rb normalized IPv4-mapped IPv6 addresses but did not recognize IPv4-compatible IPv6 addresses with...

CVE-2026-72566: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action...

CVE-2026-66410: Improper Certificate Validation

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

CVE-2026-21063: Improper Export of Android Application Components

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

PT-2026-69450

Name of the Vulnerable Software and Affected Versions automatisch versions prior to commit 41f3c56 Description A server-side request forgery SSRF issue exists where a low-privileged authenticated user with 'manage Flow' permission can force the server to fetch arbitrary URLs and retrieve the full...

CVE-2026-71560

creationtimestamp| type| source ---|---|--- 2026-08-09 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msmkikjovq23...

CVE-2026-19374: Server-Side Request Forgery (SSRF)

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The...

CVE-2026-15054

creationtimestamp| type| source ---|---|--- 2026-08-08 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msm7b7gyb525 2026-08-09 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msoccxmwyb22...

CVE-2026-15215

creationtimestamp| type| source ---|---|--- 2026-08-08 15:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msldkvwsrd2a...

CVE-2026-14526

creationtimestamp| type| source ---|---|--- 2026-08-08 09:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msks5rpsg62f 2026-08-08 13:31:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117060129732420475 2026-08-08 22:17:16+00:00| seen|...

[SECURITY] Fedora 43 Update: perl-PAR-Packer-1.064-5.fc43

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

CVE-2025-71409

creationtimestamp| type| source ---|---|--- 2026-08-07 21:52:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msjk4wtjtu2d...

CVE-2026-66061

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the...

CVE-2026-59717

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the...

CVE-2026-66061

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the...

CVE-2026-66061 Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation execution

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the...

EUVD-2026-54675

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the...