CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...

CVE-2026-82733 Route handler return value echoed into AshTypescript error response

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn, dispatch/3 i...

EEF-CVE-2026-82733 Route handler return value echoed into AshTypescript error response

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn,...

CVE-2026-76957

creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...

PT-2026-84223

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sending a crafted MQTT message to the cs broker component...

PT-2026-84077

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash typescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. apply error handler/3 in lib/ash...

PT-2026-84187

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description An issue exists within the Profile Backup component. Recommendations Update Firefox to version...

ASB-A-484928416

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-84181

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the...

PT-2026-84188

Name of the Vulnerable Software and Affected Versions Firefox Focus for Android versions prior to 155 Description An issue exists in Firefox Focus for Android. Recommendations Update to version 155...

CVE-2026-82393

creationtimestamp| type| source ---|---|--- 2026-08-31 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mufz4nnl6z2o 2026-09-02 16:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m...

CVE-2026-81756

creationtimestamp| type| source ---|---|--- 2026-08-31 22:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw66pgri2f...

CVE-2026-82226

creationtimestamp| type| source ---|---|--- 2026-08-31 22:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mufvrmimgm27 2026-08-31 22:08:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw7a7fit2t 2026-09-18 21:00:04+00:00| seen|...

CVE-2026-13732

creationtimestamp| type| source ---|---|--- 2026-08-31 21:04:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/37tqrj4ylyf5p...

CVE-2026-68944

creationtimestamp| type| source ---|---|--- 2026-08-31 20:35:03+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-mmx7-hfxf-jppx...

CVE-2026-51680

creationtimestamp| type| source ---|---|--- 2026-08-31 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muflojyii42e 2026-08-31 20:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufpgoulqn2e...

CVE-2026-73551

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

CVE-2026-73549

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string...

CVE-2026-82970

creationtimestamp| type| source ---|---|--- 2026-08-31 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufb2sdfsn24 2026-08-31 16:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufc2cgxuz2e...

CVE-2026-59111

creationtimestamp| type| source ---|---|--- 2026-08-31 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufb2qps6o2u 2026-08-31 16:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufbzroxjz2e...