CVE-2026-71098: Improper Access Control

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-71094: Improper Access Control

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Presentation Services. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-19967

creationtimestamp| type| source ---|---|--- 2026-08-17 19:34:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtch2i3rf52t...

GHSA-XV5J-CWGJ-22R4

creationtimestamp| type| source ---|---|--- 2026-08-17 14:28:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mtbvxiltgl2e 2026-08-17 14:54:30+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mtbxginal224 2026-08-22 22:00:04+00:00| published-proof-of-concept...

CVE-2026-19957

creationtimestamp| type| source ---|---|--- 2026-08-16 22:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cms5luh2p4cjg...

CVE-2026-16099

creationtimestamp| type| source ---|---|--- 2026-08-16 06:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j6jaucq2z...

Breaking and Defending LLM-Powered Social Media Bot Detection Systems

The rise of social media bots poses a persistent threat, enabling misinformation, opinion manipulation, and the erosion of trust in online platforms. To combat this, machine learning systems have been developed to detect and limit bot activity, but attackers continuously adapt through techniques...

opencve v3.1.0

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

STINER: Automated Extraction of Strategic Cyber Threat Intelligence from X

Strategic Cyber Threat Intelligence CTI focuses on high-level insights, such as identifying targeted industries, attributing attacks to specific ransomware groups, and assessing the scale of data loss. Today, X formerly Twitter has become the fastest source for this intelligence, often hosting...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

CVE-2026-58230

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

Operationalizing Cyber Threat Intelligence with GraphRAG

When a security researcher publishes a report on a cyberattack, detection engineers are supposed to turn it into working detection rules. In practice, most automated attempts at this only extract the simplest clues from the report --- bad IP addresses, domain names, and file hashes --- and turn...

Cisco Advance Notification for Publication of August 19, 2026, Security Advisories

On August 19, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Crosswork Security Hardening Release: August 2026...

CVE-2026-18952: Server-Side Request Forgery (SSRF)

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-70345

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:31+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:44+00:00| seen|...

CVE-2026-70325

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:24+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:20+00:00| seen|...

CVE-2026-64911

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:45+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:41+00:00| seen|...

CVE-2026-68820

creationtimestamp| type| source ---|---|--- 2026-08-11 18:00:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bf8749-f824-4eeb-982e-7eb87d11e75a 2026-08-11 18:18:05+00:00| seen| https://bsky.app/profile/suriq.io/post/3mst7yyfsko2o 2026-08-11...

CVE-2026-6181

creationtimestamp| type| source ---|---|--- 2026-08-11 06:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/betvitqikixaz...

CVE-2026-58243

creationtimestamp| type| source ---|---|--- 2026-08-11 02:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msrjet6xwd2b 2026-08-13 08:47:53+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...