CVE-2026-24895

creationtimestamp| type| source ---|---|--- 2026-02-12 12:40:24+00:00| published-proof-of-concept| https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38 2026-02-12 19:40:23+00:00| seen| https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0 2026-02-16 01:13:48+00:00|...

CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-2246

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltagdetectordetect of the file apriltag.c. The manipulation leads to memory corruption. The attack must be carried out locally. The exploit has been disclosed...

UBUNTU-CVE-2026-25916

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage...

CVE-2026-23741

creationtimestamp| type| source ---|---|--- 2026-02-06 13:50:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me72d5vhru2o...

PT-2026-6953

CVE-2026-25696 - Apache HTTP Server Command Injection CVE ID : CVE-2026-25696 Published : Feb. 6, 2026, 4:15 a.m. | 32 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-25546

creationtimestamp| type| source ---|---|--- 2026-02-05 00:03:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33oegvsp2h...

CVE-2026-25157

creationtimestamp| type| source ---|---|--- 2026-02-04 20:22:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pbo4ear23 2026-02-04 20:22:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pcklw6b23 2026-02-09 19:30:05+00:00| seen|...

CVE-2025-52623 HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects...

CVE-2025-67850

creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...

CVE-2026-23025

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: prevent pcp corruption with SMP=n The kernel test robot has reported: BUG: spinlock trylock failure on UP on CPU0, kcompactd0/28 lock: 0xffff888807e35ef0, .magic: dead4ead, .owner: kcompactd0/28, .ownercpu: 0 CPU: 0...

CVE-2026-1593

creationtimestamp| type| source ---|---|--- 2026-01-29 18:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlfe7co5x2c...

CVE-2025-55131 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-22402

creationtimestamp| type| source ---|---|--- 2026-01-27 19:28:16+00:00| seen| Telegram/z8RNjGVmW2nLDYc2FEkRD6zWwRyfZpKGx4ibAKlJ-1Q33Y...

CVE-2020-36938

creationtimestamp| type| source ---|---|--- 2026-01-27 16:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdg6j22qvn2m...

CVE-2025-12543 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2020-36957

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2025-13921

creationtimestamp| type| source ---|---|--- 2026-01-23 14:16:12+00:00| seen| https://gist.github.com/Darkcrai86/092cf39da49853e25fe1137e7ed78623...

CVE-2026-23699

AP180 series with firmware versions prior to APRGOS 11.94B1P8 contains an OS command injection vulnerability. If this vulnerability is exploited, arbitrary commands may be executed on the devices...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...