7461 matches found
CVE-2026-24241
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-2791
Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
MemoPhishAgent: Memory-Augmented Multi-Modal LLM Agent for Phishing URL Detection
Traditional phishing website detection relies on static heuristics or reference lists, which lag behind rapidly evolving attacks. While recent systems incorporate large language models LLMs, they are still prompt-based, deterministic pipelines that underutilize reasoning capability. We present...
PT-2026-21787
Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms has an issue with improper authentication. An attacker could exploit this to potentially disclose...
CVE-2026-26198
creationtimestamp| type| source ---|---|--- 2026-02-22 13:53:29+00:00| published-proof-of-concept| https://github.com/ormar-orm/ormar/security/advisories/GHSA-xxh2-68g9-8jqr 2026-02-24 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbqlowoi26 2026-02-24...
CVE-2026-26975
creationtimestamp| type| source ---|---|--- 2026-02-20 01:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfawskqi6z2f 2026-02-20 01:18:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfawti2fy32k 2026-02-20 01:30:31+00:00| seen|...
CVE-2026-26339
creationtimestamp| type| source ---|---|--- 2026-02-19 18:00:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/116098598316831047 2026-02-19 18:00:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfa6e43u5v22 2026-02-19 19:00:19+00:00| seen|...
CVE-2026-25500
Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, Rack::Directory generates an HTML directory index where each file entry is rendered as a clickable link. If a file exists on disk whose basename starts with the javascript: scheme e.g. javascript:alert1, the...
CVE-2026-26996
creationtimestamp| type| source ---|---|--- 2026-02-17 04:32:34+00:00| published-proof-of-concept| https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 2026-02-20 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116101783951367234 2026-02-20...
Toward a Military Smart Cyber Situational Awareness (CSA)
The development of technology across multiple sectors and the growing importance of cyber warfare make the development of Cyber Situational Awareness CSA a fundamental component of any cyber defense strategy. CSA, as a practice, enables understanding of the current landscape within an organizatio...
MAL-2026-900 Malicious code in cubaflixdownload (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e301875480dd0a0265eef6c8d1a5b65ef85f1e2051d0e5491dcb4767c5f7b578 During importing, the code automatically starts a Telegram bot designed to download and save files locally upon a specific message in the channel. While this...
Malicious code in cubaflixdownload (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e301875480dd0a0265eef6c8d1a5b65ef85f1e2051d0e5491dcb4767c5f7b578 During importing, the code automatically starts a Telegram bot designed to download and save files locally upon a specific message in the channel. While this...
MAL-2026-901 Malicious code in platforms (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 152f27ebcd7a8c662ffcbfe69086e0a50e71f73993bc7d97ce3bb67896c8a4dc During importing, the code automatically starts a Telegram bot designed to download and save files locally upon a specific message in the channel. While this...
Malicious code in platforms (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 152f27ebcd7a8c662ffcbfe69086e0a50e71f73993bc7d97ce3bb67896c8a4dc During importing, the code automatically starts a Telegram bot designed to download and save files locally upon a specific message in the channel. While this...
Security update for cargo-auditable
This update for cargo-auditable fixes the following issues: Update to version 0.7.20. Security issues fixed: CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257906. Other updates and bugfixes: Update to version 0.7.20: mention cargo-dist...
CVE-2026-26011
creationtimestamp| type| source ---|---|--- 2026-02-13 04:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116061439961827538 2026-02-13 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mepocgwalc2a...
CVE-2026-20636
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-20675
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may lead to disclosure of...
CVE-2026-20635
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-20626
This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges...