GHSA-8GRV-JQ2G-CFHW

creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...

CVE-2026-0509

creationtimestamp| type| source ---|---|--- 2026-02-10 04:22:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4giydu22o 2026-02-10 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mei4vp2qzh2s 2026-02-10 04:30:34+00:00| seen|...

CVE-2026-23687

creationtimestamp| type| source ---|---|--- 2026-02-10 04:21:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4fhz6zu27 2026-02-10 17:50:24+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116047598323988456 2026-02-10 17:52:43+00:00| seen|...

CVE-2026-25938

creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:06+00:00| seen| https://gist.github.com/alon710/342949282eb9c73531dd21d7ba1dbd82 2026-02-12 04:48:43+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3men6tzs3vy2r 2026-08-13 15:00:04+00:00| seen|...

GHSA-GG64-XXR9-QHJP

creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:05+00:00| seen| https://gist.github.com/alon710/98338210f5bd9ada35f70b193f4ec636...

GHSA-C869-JX4C-Q5FC

creationtimestamp| type| source ---|---|--- 2026-02-10 02:40:05+00:00| seen| https://gist.github.com/alon710/fb457bfeef78c9056a7ced2406cd4503...

CVE-2026-25939

creationtimestamp| type| source ---|---|--- 2026-02-10 02:40:05+00:00| seen| https://gist.github.com/alon710/fb457bfeef78c9056a7ced2406cd4503 2026-02-10 10:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116045868587116054 2026-02-10 10:30:33+00:00| seen|...

GHSA-37CX-329C-33X3

creationtimestamp| type| source ---|---|--- 2026-02-10 02:10:05+00:00| seen| https://gist.github.com/alon710/a0764eb20d9f8956650b2167c18e15c7...

Missing Authorization

Overview @frangoteam/fuxa is a Web-based Process Visualization SCADA/HMI/Dashboard software Affected versions of this package are vulnerable to Missing Authorization in the scheduler endpoint. An attacker can gain unauthorized access to create, modify, or delete schedules by sending crafted...

CVE-2026-25895

creationtimestamp| type| source ---|---|--- 2026-02-10 00:00:48+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mehntchb352m 2026-02-10 00:00:50+00:00| seen| https://infosec.exchange/users/offseq/statuses/116043392265377056 2026-04-24 22:00:05+00:00| published-proof-of-concept|...

GHSA-2453-MPPF-46CJ

creationtimestamp| type| source ---|---|--- 2026-02-09 23:40:05+00:00| seen| https://gist.github.com/alon710/05c03b478ac40a36955b23403707c5ec 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4...

GHSA-9F5H-MMQ6-2X78

creationtimestamp| type| source ---|---|--- 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...

GHSA-FXP3-G6GW-4R4V

creationtimestamp| type| source ---|---|--- 2026-02-09 22:40:05+00:00| seen| https://gist.github.com/alon710/0e2af79b6e2e09f5b68854774d91ca42...

CVE-2026-25939 FUXA Unauthenticated Remote Arbitrary Scheduler Write

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on...

CVE-2026-25961

creationtimestamp| type| source ---|---|--- 2026-02-09 22:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehi4sz25j23...

CVE-2026-25761

creationtimestamp| type| source ---|---|--- 2026-02-09 21:20:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehetze3mn22 2026-02-09 21:20:09+00:00| seen| https://bsky.app/profile/potato.software/post/3meheu2azx225...

CVE-2025-14831

creationtimestamp| type| source ---|---|--- 2026-02-09 20:38:05+00:00| seen| https://seclists.org/oss-sec/2026/q1/155 2026-02-09 21:59:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mehh26gnqo23 2026-02-10 14:25:28+00:00| seen|...

CVE-2026-25791 Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored...

CVE-2025-12699

creationtimestamp| type| source ---|---|--- 2026-02-09 20:31:35+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-041-01...

CVE-2026-1486

creationtimestamp| type| source ---|---|--- 2026-02-09 20:24:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbpr3lqv23 2026-02-09 20:24:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehbqyfm4i2v 2026-02-10 20:10:05+00:00| seen|...