CVE-2026-12478

creationtimestamp| type| source ---|---|--- 2026-07-14 12:24:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm77bdq4b2g 2026-07-20 19:39:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42cxog452j 2026-07-20 19:45:00+00:00| seen|...

CVE-2026-14852

creationtimestamp| type| source ---|---|--- 2026-07-14 12:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm6efxiz52e 2026-07-20 19:28:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr3znshsqz2h 2026-07-20 19:28:03+00:00| seen|...

Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold

Telegram's t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown...

CVE-2026-8384

creationtimestamp| type| source ---|---|--- 2026-07-14 11:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5q2hfk72w 2026-07-20 05:39:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ldikcy42i 2026-07-20 05:44:37+00:00| seen|...

CVE-2026-15389

creationtimestamp| type| source ---|---|--- 2026-07-14 11:52:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5fs4qpo2g 2026-07-20 19:45:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42mwcjv52u...

CVE-2026-15676

creationtimestamp| type| source ---|---|--- 2026-07-14 10:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlxoogjjd24...

CVE-2026-12511

creationtimestamp| type| source ---|---|--- 2026-07-14 09:27:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvdarid52e 2026-07-15 00:00:32+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqng3cfyza2o 2026-07-19 21:09:30+00:00| seen|...

CVE-2026-57407

creationtimestamp| type| source ---|---|--- 2026-07-14 09:06:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqlu4rm7rr2v...

CVE-2026-15076

creationtimestamp| type| source ---|---|--- 2026-07-14 08:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqltexldvt2i 2026-07-19 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqzbcvurye26 2026-07-20 05:37:01+00:00| seen|...

BIT-DISCOURSE-2026-59828 Discourse: Hidden post revisions leak through adjacent visible diffs

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...

CVE-2026-59961

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-59964

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-59674 LPE from suricata user to root due to chown in %post in suricata packaging

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...

CVE-2026-59674

CVE-2026-59674 affects openSUSE Tumbleweed surfacing a local privilege escalation in suricata packaging due to a symlink follow vulnerability in the post-install script. Connected details indicate the issue involves the libsuricata8 package (version 8.0.5-2.1 and earlier) and is fixed in 8.0.5-2....

CVE-2026-15669

creationtimestamp| type| source ---|---|--- 2026-07-14 06:38:25+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqllu4jrw32u 2026-07-14 09:50:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlwkujr2s2w 2026-07-19 20:30:48+00:00| seen|...

CVE-2026-15626

creationtimestamp| type| source ---|---|--- 2026-07-14 05:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljkqzsov2w 2026-07-19 20:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmib3x532j...

CVE-2026-45203

creationtimestamp| type| source ---|---|--- 2026-07-14 04:14:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldsw36yv2d...

CVE-2026-60103

creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...

CVE-2026-61503

creationtimestamp| type| source ---|---|--- 2026-07-14 03:58:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcw6dgie2c...

MAL-2026-10532 Malicious code in fluterjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8d561ceacd48c1883f6ec3151f5567240259b5ba54af3835fc0537f2f18933 The package's main and bin entry, server.js, starts an Express server bound to 0.0.0.0:10459 that exposes POST /ejecutar. The handler reads the JSON...