PT-2026-79950

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

SiNMULI: Novel Signed Network Approach for Malicious URL Identification

In today's era of rapid advancements in artificial intelligence, computer security and online safeguarding measures have undergone significant improvements. However, malicious websites continue to facilitate the spread of phishing schemes, fraudulent activities and unsolicited communications...

CauSec: Unboxing the Causal Drivers of Static Vulnerability Analysis Performance

Static Application Security Testing SAST tools are widely used in both industry and academia. Such tools often make design choices that sacrifice detection to achieve higher performance, i.e., increased precision, decreased runtime, or increased scalability. These design choices rely on certain...

Joern 4.0.606

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Zeek 8.0.10

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

PT-2026-79859

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

Zeek 8.2.2

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

angr 9.3.3

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

CVE-2026-71164

creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb7fpve52m 2026-08-19 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgfocbhk22y 2026-08-19 17:16:54+00:00| seen|...

CVE-2026-62637

creationtimestamp| type| source ---|---|--- 2026-08-18 22:19:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqfzned2j 2026-08-19 05:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb77ug323 2026-08-19 17:21:17+00:00| seen|...

kill-chain-vulnerability-scanner

Kill Chain Scanner A Python-based automated web applicatio...

CVE-2026-73930

creationtimestamp| type| source ---|---|--- 2026-08-18 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf7pmeark2t 2026-08-18 22:29:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbcr4kzg2j 2026-08-19 10:20:05+00:00| seen|...

CVE-2026-73918

...

CVE-2026-73916

Helidon 3.2.18 (Oracle Fusion Middleware, Imperative Web Server component) is affected by a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated attacker over HTTP, granting unauthorized access to all Helidon-accessible data and enabling creation, deletion, or modification of criti...

CVE-2026-71167

Helidon 4.5.0's Imperative Web Server component is critically vulnerable (CVSS 9.4) to unauthenticated, remote HTTP attacks allowing full data compromise and partial DoS. No public exploit or root-cause details are provided; Oracle has released patches per its August 2026 CPU advisory.

CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...

CVE-2026-71037

...

CVE-2026-71034

...

CVE-2026-70847

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...