15719 matches found
CVE-2026-62633
Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...
CVE-2026-61016
...
CVE-2026-60921
...
CVE-2026-60905
...
CVE-2026-60781
...
CVE-2026-66780
creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c 2026-08-18 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j 2026-08-20 12:59:58+00:00| seen|...
GHSA-8J49-MMCX-4MP5 MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads
Summary The findiconpathzip function in MobSF does not properly sanitize the android:icon attribute extracted from an Android manifest before resolving it as a filesystem path. An attacker can supply a malicious android:icon value containing path traversal sequences, causing MobSF to read arbitra...
MobSF has SSRF port restriction bypass in assetlinks_check
Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with validhost, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in validhost and lets a crafted APK cause...
CVE-2026-67926
creationtimestamp| type| source ---|---|--- 2026-08-18 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtensa47722u...
CVE-2026-32474
creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelzuzwln23 2026-08-18 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteqllljvl23...
diaphora v3.4.2
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
MINI-63Q3-CM3F-PQGP
Bulletin has no description...
qwen3.8-27b-cyber-exploit-agent
--- libraryname: peft basemodel: AEON-7/Qwen3.8-27B-AEON-ULTIM...
MAL-2026-14123 Malicious code in @oyo_tech/oyochat_user (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2211869e361bf0cd90956a5c1dae972927c25c1d52e5ed4729cddc7b67fe682e @oyotech/[email protected] is a dependency-confusion probe. package.json declares a preinstall script that runs node -e...
certgraveyard_yara v2026.08.18
CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...
MINI-9XJQ-2H3V-7GHF
Bulletin has no description...
BELL-CVE-2026-74427
Bulletin has no description...
CVE-2026-17481
creationtimestamp| type| source ---|---|--- 2026-08-18 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtdffflozx24 2026-09-07 02:04:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3muvg63slgl2u...
CVE-2026-11801
creationtimestamp| type| source ---|---|--- 2026-08-18 04:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtdezjzll22r 2026-08-18 05:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdgpvlkpw2r...
Benchmarking Automated Security Patch Backporting: How Far Are We?
Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...