CVE-2026-54603

creationtimestamp| type| source ---|---|--- 2026-07-28 18:35:08+00:00| published-proof-of-concept| https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...

korvath (1.0.0) potentially affected by unknown CVE via korvica (1.0.0)

korvica NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on korvica and may be impacted: - korvath 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KORVICA-18503747...

Malicious Package

Overview @crbrc/xbt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

GHSA-3FCR-JVGP-7F58

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc...

CVE-2026-54635

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...

GHSA-3735-5339-XFWX

creationtimestamp| type| source ---|---|--- 2026-07-28 17:31:58+00:00| seen| https://gist.github.com/alon710/10debd6350fb30cffecd8ed90a44aae9...

SUSE CVE-2026-12803

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

DEBIAN-CVE-2026-54603

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Clientrequest overrides the request authority, so the bearer Authorization header is sent to an...

CVE-2026-16581

creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06 2026-07-28 17:04:20+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mrpve6p6qi23 2026-07-28 17:04:22+00:00| seen|...

CVE-2026-16347

creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05 2026-07-28 23:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkvfi4dm2s 2026-08-01 01:02:36+00:00| seen|...

CVE-2026-43910

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:12+00:00| published-proof-of-concept| https://github.com/appium/java-client/security/advisories/GHSA-28f5-38xr-jh2w...

CVE-2026-47427

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:07+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7 2026-07-28 23:12:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l...

CVE-2026-61609

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...

CVE-2026-54593

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:02+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-8r6w-3qq5-4p4r...

GHSA-HC4M-Q9JH-XW4J

creationtimestamp| type| source ---|---|--- 2026-07-28 16:31:30+00:00| seen| https://gist.github.com/alon710/92ad6f547c2ba0c3ac7a937f90c439cc...

firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...

firefox: thunderbird: Mitigation bypass in the Enterprise Policies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Enterprise Policies component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...