PT-2026-83070

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...

PT-2026-82971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The register pid function contains multiple flaws when processing untrusted perf.data. An integer overflow can occur on 32-bit systems when a large pid is used, leading to out-of-bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...

PT-2026-83150

Contributor Broken Access Control in WpEvently = 5.5.0 versions...

EUVD-2026-67308

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...

GHSA-Q7M3-RHXG-7VXR

creationtimestamp| type| source ---|---|--- 2026-08-27 22:31:50+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8 2026-08-28 00:01:49+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8...

CVE-2026-18885

creationtimestamp| type| source ---|---|--- 2026-08-27 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3udv6djg2m 2026-08-28 03:02:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mu4eqr6anp2y 2026-08-28 07:50:09+00:00| seen|...

MAL-2026-14581 Malicious code in flyteplugins-agento11y (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2026-81934

creationtimestamp| type| source ---|---|--- 2026-08-27 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3qk5iz6s2m 2026-08-27 22:09:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3ufoxuoy2p 2026-08-28 08:10:05+00:00| seen|...

CVE-2025-51679

creationtimestamp| type| source ---|---|--- 2026-08-27 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3pfnl26h2t...

CVE-2025-70290

creationtimestamp| type| source ---|---|--- 2026-08-27 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3obvfbwy2m 2026-08-28 00:01:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mu42nilght2s 2026-08-28 21:35:41+00:00| seen|...

CVE-2026-81827

creationtimestamp| type| source ---|---|--- 2026-08-27 18:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2aycrsxvjyqle...

CVE-2026-81700

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyh2uwf2b 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:00:58+00:00| seen|...

CVE-2026-81685

creationtimestamp| type| source ---|---|--- 2026-08-27 18:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gx25kt32c 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 08:40:08+00:00| seen|...

CVE-2026-81698

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

PYSEC-2026-3776

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

PYSEC-2026-3775

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

PYSEC-2026-3775

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

CVE-2026-26897

An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...

CVE-2026-78276

creationtimestamp| type| source ---|---|--- 2026-08-27 17:11:11+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu3dq2yuc62a 2026-08-27 17:11:13+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117168581500496652...