CVE-2026-74662

creationtimestamp| type| source ---|---|--- 2026-08-25 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvanku5xz2y 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-74617

creationtimestamp| type| source ---|---|--- 2026-08-25 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtva3of3hg2c...

Malicious code in cscasereadserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336250fe38295375704495b6529ed6eb82f7006b6249c78ace08bc92d96d4bde [email protected] executes a preinstall script that auto-runs on npm install. The script collects the installer's OS username, hostname, an...

CVE-2026-74597

creationtimestamp| type| source ---|---|--- 2026-08-25 06:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv6xubjoc25...

CVE-2026-74587

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u4zxvj2f...

CVE-2026-74586

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u3hm5a23 2026-09-09 16:00:06+00:00| seen| Telegram/idrq8GCshAndCL-cMA1Uoj2VzIrne5jNTdbo8AkO8RR-nM 2026-09-09 16:00:07+00:00| published-proof-of-concept|...

Duplicate Advisory: Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xjw5-q542-3vmr. This link is maintained to preserve external references. Original Description Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block acce...

Duplicate Advisory: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p597-crqc-m349. This link is maintained to preserve external references. Original Description Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowi...

CVE-2026-72702

creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsbu6id25 2026-08-25 04:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzzyhhc2c 2026-08-25 04:30:24+00:00| seen|...

CVE-2026-78682

creationtimestamp| type| source ---|---|--- 2026-08-25 02:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jncnsizlxkj4d 2026-09-01 13:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhk3wgcdl2f 2026-09-08 18:35:23+00:00| published-proof-of-concept|...

CVE-2026-78683

creationtimestamp| type| source ---|---|--- 2026-08-25 02:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqytwvum2e 2026-08-25 02:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6kw3zehwcdngz 2026-08-25 04:08:25+00:00| seen|...

CVE-2026-56710

creationtimestamp| type| source ---|---|--- 2026-08-25 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqgxw2sc2u 2026-08-25 04:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzjuvpw2p...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the do_secure_storage_access() function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the dosecurestorageaccess function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system is related to an exception handling error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the `ovs_netdev_tunnelDestroy()` function in the `net/openvswitch/vport-netdev.c` file, which is part of the Open vSwitch router support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ovsnetdevtunnelDestroy function in the net/openvswitch/vport-netdev.c module, which supports Open vSwitch routers in the Linux operating system, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the eiointc_update_sw_coremap() function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the eiointcupdateswcoremap function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch Linux kernel architecture is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the read_key_from_user_keying() function in the kernel/crash_dump_dm_crypt.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the readkeyfromuserkeying function in the kernel module crashdumpdmcrypt.c of the Linux operating system is related to the inclusion of proprietary information in the debugging code. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the rocket_probe() function of the drivers/accel/rocket/rocket_drv.c driver module of the Linux kernel’s acceleration devices allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the rocketprobe function in the drivers/accel/rocket/rocketdrv.c driver for kernel acceleration devices in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the rxkad_decrypt_ticket() function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

PT-2026-81674

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in CustomTabs allows a local attacker to obtain sensitive information through a co-installed application. Recommendations Update Google Chrome on Androi...