CVE-2026-77561

creationtimestamp| type| source ---|---|--- 2026-09-21 17:44:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fyq3mgwpbue2b 2026-09-22 22:35:27+00:00| published-proof-of-concept| https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-9xhm-w3wj-xhqh...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

CVE-2021-24545

CVE-2021-24545 Es una vulnerabilidad XSS encontrada en un plugin cuya distribución ha sido suspendida. Vulnerabilidad XSS en la descripción del plugin HTML Author Bio de WordPress. Esta vulnerabilidad se debe a una validación inadecuada del parámetro description en /wp-admin/profile.php. Un...

CVE-2026-53940

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

USN-8796-1: OpenJDK 21 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 21 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 21 did not correctly handle user...

USN-8795-1 openjdk-17 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 17 did not correctly handle user...

CVE-2026-16651

creationtimestamp| type| source ---|---|--- 2026-09-21 16:01:32+00:00| seen| https://gist.github.com/ichintu/4a9aae7d3d8d22be0592bc020e91d67a 2026-09-22 11:40:51+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mw45fe6kuf2k...

CVE-2026-53940 Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-52742

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-55060 GoCD is vulnerable to authorization bypass via support process list API

GoCD is a continuous deliver server. From 13.1.0 until 26.1.0, the /go/api/support/processlist endpoint does not enforce its intended administrator-only authorization. An authenticated internal user can query the endpoint while source control child processes are running and view command-line...

CVE-2026-94383

creationtimestamp| type| source ---|---|--- 2026-09-21 14:10:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ap64gxmp3hssp 2026-09-22 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-misp-1 2026-09-23 04:30:04+00:00| seen|...

CVE-2026-42533-Config-Scanner

nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...

CVE-2026-78124

creationtimestamp| type| source ---|---|--- 2026-09-21 13:45:28+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvztvarel52t...

CVE-2026-94099

creationtimestamp| type| source ---|---|--- 2026-09-21 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117309271481222891 2026-09-21 13:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvzt2jhqcc2x...

CVE-2026-13623

creationtimestamp| type| source ---|---|--- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

CVE-2026-13635

creationtimestamp| type| source ---|---|--- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

USN-8785-1: OpenJDK 11 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 11 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 11 did not correctly handle user...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...

CVE-2025-12999

creationtimestamp| type| source ---|---|--- 2026-09-21 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvzgqebuf42g 2026-09-21 09:57:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hafbptppfxukv 2026-09-21 10:07:08+00:00| seen|...