PT-2026-63456

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

PT-2026-58005

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

CVE-2026-15389: Authorization Bypass Through User-Controlled Key

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

PT-2026-60097

Name of the Vulnerable Software and Affected Versions nebula-mesh affected versions not specified Description The web handler renderMobileBundle passes a pki.CAResolver to the mobilebundle.Build function, which decrypts the CA's ed25519 private key into a pki.CAManager. However, the Build functio...

PT-2026-60081

Name of the Vulnerable Software and Affected Versions Hoverfly version 1.12.7 Description When operating in Diff mode, the software is susceptible to a denial of service. The AddDiff function writes to the shared responsesDiff map without proper synchronization. Because each incoming proxy reques...

CVE-2026-62188

creationtimestamp| type| source ---|---|--- 2026-07-13 23:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqktx6xbvt27 2026-09-07 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muwtlz3dha2p...

CVE-2026-13039

creationtimestamp| type| source ---|---|--- 2026-07-13 23:24:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktmni3so2c...

CVE-2026-15607 tanstack db Alias Path select.ts select prototype pollution

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack ma...

CVE-2026-62197

creationtimestamp| type| source ---|---|--- 2026-07-13 22:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkricfkio2z...

CVE-2026-62192

creationtimestamp| type| source ---|---|--- 2026-07-13 22:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrbdxlxy2t...

CVE-2026-58102

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hvexts. When building the extension hash via extensions, extensionsbylongname, extensionsbyoid, or hasextensionoid, the code passes OBJobj2txt's return value as the hash-key...

systems-exploitation-ctf

Systems Exploitation CTF Five offensive-security challenges s...

CVE-2026-36214

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-15 00:00:31+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-16 12:00:07+00:00| seen|...

CVE-2026-52100

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-15 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92641 2026-07-16 19:00:15+00:00| seen|...

GHSA-QV97-83W4-FF86

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92598 2026-07-16 19:00:15+00:00| seen|...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

CVE-2026-58408

creationtimestamp| type| source ---|---|--- 2026-07-13 21:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoajc22s2k...

CVE-2026-26396

creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqklm5ggqj2d...

CVE-2026-55773

creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkllwplkm2l 2026-07-13 21:57:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoqqunqx2l...