CVE-2026-53203

creationtimestamp| type| source ---|---|--- 2026-07-03 17:22:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2ppftyb2k...

CVE-2026-38969

creationtimestamp| type| source ---|---|--- 2026-07-03 17:19:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c...

CVE-2026-53222

creationtimestamp| type| source ---|---|--- 2026-07-03 15:55:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvtroutk2c...

CVE-2026-53223

creationtimestamp| type| source ---|---|--- 2026-07-03 15:53:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvptxwrp2y 2026-07-06 06:51:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-59101

creationtimestamp| type| source ---|---|--- 2026-07-03 15:10:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdkwzky2i...

CVE-2026-59234 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion

Authorization Bypass Through User-Controlled Key CWE-639 in CalendarDeleteEventController app/Http/Controllers/Calendar/CalendarDeleteEventController.php, exposed at GET /calendar/event/delete/id, in Prospero Flow CRM before 5.5.3 allows a remote, authenticated attacker to delete arbitrary calend...

CVE-2026-9230

creationtimestamp| type| source ---|---|--- 2026-07-03 09:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbuoa3v62i 2026-07-03 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprhrglbwb2k 2026-07-03 22:35:41+00:00| seen|...

CVE-2026-12168

creationtimestamp| type| source ---|---|--- 2026-07-03 09:36:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaowulub2o 2026-07-25 15:00:05+00:00| seen| https://t.me/ZerodayAlert/749 2026-07-26 00:00:38+00:00| seen| https://t.me/ZerodayAlert/749...

CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-9080 UAF after pause in socket callback

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-47897

creationtimestamp| type| source ---|---|--- 2026-07-03 01:22:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mppf2vbry22c 2026-07-03 10:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqekix6hr2a 2026-07-03 22:36:05+00:00| seen|...

CVE-2026-57671

creationtimestamp| type| source ---|---|--- 2026-07-03 00:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcg77jh522...

The vulnerability of the `alloc_event_waiters()` function in the `drivers/gpu/drm/amd/amdkfd/kfd_events.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the alloceventwaiters function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability could allow an attacker t...

CVE-2026-58578

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...

CVE-2026-58578 LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...

EUVD-2026-41420

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...

CVE-2026-55119

creationtimestamp| type| source ---|---|--- 2026-07-02 18:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpopif3kwk2a 2026-07-03 07:27:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzgy6epo2n 2026-07-08 11:01:21+00:00| seen|...

OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance

Summary OpenClaw nodes send lifecycle events back to the gateway. In affected releases, a paired node could send an exec lifecycle event that was accepted without enough provenance tying it to an authorized system.run request. This issue affects the node event boundary. It does not allow an...

EUVD-2026-36322

OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance...

GHSA-3C6J-HQ33-3JV4 OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance

Summary OpenClaw nodes send lifecycle events back to the gateway. In affected releases, a paired node could send an exec lifecycle event that was accepted without enough provenance tying it to an authorized system.run request. This issue affects the node event boundary. It does not allow an...