CVE-2026-80587

creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq3yuww2y 2026-08-27 09:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2ifescyz2o 2026-08-27 16:23:29+00:00| seen|...

CVE-2026-54757

creationtimestamp| type| source ---|---|--- 2026-08-26 04:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtxh2skin32b...

CVE-2026-65182

creationtimestamp| type| source ---|---|--- 2026-08-26 00:42:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2db2ktkirf4d 2026-08-26 12:30:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k 2026-08-27 16:00:05+00:00| seen|...

CVE-2026-57171

creationtimestamp| type| source ---|---|--- 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d...

CVE-2026-76197

creationtimestamp| type| source ---|---|--- 2026-08-25 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwiwvuyjr27 2026-08-25 20:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmonpek32p 2026-08-25 23:40:05+00:00| seen|...

CVE-2026-14457

creationtimestamp| type| source ---|---|--- 2026-08-25 15:58:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtw6qb4pfk2b 2026-08-25 16:27:45+00:00| seen| https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23 2026-08-26 01:09:35+00:00| seen|...

PT-2026-81898

Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-78265

creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufu62l7y24 2026-08-24 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuhit53l42p 2026-08-25 00:08:22+00:00| seen|...

CVE-2026-39975

creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...

CVE-2026-76205

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405...

CVE-2026-78255

creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...

CVE-2026-78057

creationtimestamp| type| source ---|---|--- 2026-08-23 04:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ftkgjp5wud4yh...

CVE-2026-71513

creationtimestamp| type| source ---|---|--- 2026-08-22 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpewfmcze22 2026-08-23 01:10:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtpm5xzluq2i 2026-08-23 01:10:31+00:00| seen|...

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workload scenarios. Tigera Calico has a security vulnerability that arises from printing the complete connection configuration structure when calle...

Insertion of Sensitive Information into Log File

Overview github.com/authzed/spicedb/pkg/cmd/server is a Google Zanzibar-inspired fine-grained permissions database Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the configuration log output during startup when the log level is set to info...

AWS VDP: Encryption context keys and values logged at INFO level

Component: cmd/server/main.go:101-106 Affected Version: aws-encryption-provider @ 4341c70 all versions Found by: Source audit TLP: TLP:Amber --- Summary The server startup code logs all encryption context key-value pairs at INFO level. Encryption context is metadata associated with KMS operations...

CVE-2026-32598

The CVE concerns OneUptime. Before version 10.0.24, the password reset flow logged the full password reset URL, including the plaintext token, at INFO level by default in production. This allowed anyone with access to application logs (e.g., log aggregation, Docker logs, Kubernetes pod logs) to i...

CVE-2026-32598 OneUptime: Password Reset Token Logged at INFO Level

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is enabled by default in production. Anyone with access to application logs log...

RustFS Logs Sensitive Credentials in Plaintext

Summary RustFS logs sensitive credential material access key, secret key, session token to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be accessible to internal or external log consumers and could lead to compromise of sensitive...

CVE-2026-24762

RustFS exposes credentials in plaintext in logs across versions alpha.13–alpha.81 due to logging sensitive credential material (access key, secret key, session token) at INFO level. This information disclosure could allow internal or external log consumers to obtain credentials and compromise Rus...