CVE-2026-55859

creationtimestamp| type| source ---|---|--- 2026-08-29 02:32:11+00:00| seen| https://gist.github.com/alon710/dd09c3ef696a75a72346fac91d4e54bd...

GHSA-5RQC-86VF-G8R2

creationtimestamp| type| source ---|---|--- 2026-08-29 02:32:11+00:00| seen| https://gist.github.com/alon710/dd09c3ef696a75a72346fac91d4e54bd...

MAL-2026-15549 Malicious code in ckeditor5-ckbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9373ed3aa6afb53ef5d5d3dd4860a4ed9e7b151fdd8c5c7782f2b2e914810fc7 Unscoped npm package ckeditor5-ckbox mimics the legitimate @ckeditor/ckeditor5-ckbox plugin. package.json declares a preinstall hook node index.js th...

CVE-2026-55860

creationtimestamp| type| source ---|---|--- 2026-08-29 01:40:29+00:00| seen| https://gist.github.com/alon710/607da531ae276a39a8c057ba4505abda...

CVE-2026-81490

creationtimestamp| type| source ---|---|--- 2026-08-29 00:02:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l5mavlu2o 2026-08-29 11:08:29+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117178479904417039 2026-08-29 11:08:31+00:00| seen|...

CVE-2026-65646

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:07+00:00| seen| https://t.me/captainsmok3rofficial/502...

python313-Authlib-1.7.2-3.1 on GA media (moderate)

python313-Authlib-1.7.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11614-1 Rating: moderate Cross-References: CVE-2024-37568 CVSS scores: CVE-2024-37568 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

CVE-2026-55696

creationtimestamp| type| source ---|---|--- 2026-08-28 22:35:07+00:00| published-proof-of-concept| https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-f2xf-7x3g-4272...

GHSA-MRPP-V6PG-P54X

creationtimestamp| type| source ---|---|--- 2026-08-28 22:19:38+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mu6fgl7bp42g 2026-08-29 15:32:25+00:00| seen| https://gist.github.com/alon710/a4189f000966d11dd547e0bc128cf503...

CVE-2026-17203

IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-18904

IBM Langflow OSS versions 1.0.0 through 1.11.1 are affected by an authorization bypass (CWE-639) stemming from a namespace collision between user identifiers . The public flow metadata endpoint exposes the owner's user_id, which an unauthenticated attacker can reuse as a client_id to collide with...

CVE-2026-55485

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:29+00:00| published-proof-of-concept| https://github.com/piccolo-orm/piccoloadmin/security/advisories/GHSA-2gh4-jmwq-rr8w 2026-08-30 12:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucduenvgk2z...

CVE-2026-55245

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:24+00:00| published-proof-of-concept| https://github.com/maximhq/bifrost/security/advisories/GHSA-w98g-5w9p-p3rc...

CVE-2026-55584

phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSIALLOWED access-control check in readconfig.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTEADDR. A remote unauthenticated attacker can supply an allowed address ...

CVE-2026-51640

Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh neighbor information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51636

Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51621

Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive device configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51625

Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-19234

creationtimestamp| type| source ---|---|--- 2026-08-28 18:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu5yynzt3f2m...

CVE-2026-55108

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:46+00:00| published-proof-of-concept| https://github.com/kubevela/kubevela/security/advisories/GHSA-fmgp-q6jx-gg3x 2026-08-30 14:02:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muckkxgqnj27...