CVE-2025-40539

creationtimestamp| type| source ---|---|--- 2026-02-24 08:20:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflqbhrle32h 2026-02-24 09:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflsnj7uds24 2026-02-24 13:34:15+00:00| seen|...

CVE-2025-13943

creationtimestamp| type| source ---|---|--- 2026-02-24 04:09:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflcb4lxba2s 2026-02-24 04:10:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflcbwvhh62c 2026-02-24 04:10:16+00:00| seen|...

CVE-2025-13942

creationtimestamp| type| source ---|---|--- 2026-02-24 04:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbs327is2c 2026-02-24 05:12:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflfrwgeqb2y 2026-02-24 06:22:11+00:00| seen|...

CVE-2026-26331

creationtimestamp| type| source ---|---|--- 2026-02-24 04:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbqt6l4h2u 2026-02-24 04:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbrtojwy2s 2026-02-24 04:57:40+00:00| seen|...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the formatIPTC function. An attacker can cause the application to enter an infinite loop and exhaust system resources by supplying a malicious image profile containing invalid IPTC data. Remediation A fix was pushed int...

CVE-2026-26746

creationtimestamp| type| source ---|---|--- 2026-02-24 00:23:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkvlw3c4b2f 2026-02-24 00:23:01+00:00| seen| https://bsky.app/profile/potato.software/post/3mfkvlxchyo2u...

📄 Windows File Explorer Information Disclosure

Proof of concept exploit that demonstrates how the Microsoft Windows File Explorer fails to properly restrict access to sensitive system locations. Exploit Title: Windows File Explorer Information Disclosure CVE-2026-20937 Date: 2026-02-24 Exploit Author: nu11secur1ty Vendor Homepage:...

CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

CVE-2026-24494

creationtimestamp| type| source ---|---|--- 2026-02-23 02:29:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfim75r5gl2s 2026-02-23 02:39:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfimri6ozz2u 2026-02-23 03:00:31+00:00| seen|...

CVE-2026-2998

creationtimestamp| type| source ---|---|--- 2026-02-23 02:25:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10723-14549-2.html 2026-02-23 04:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfisch5n7l25 2026-02-23 04:30:27+00:00| seen|...

CVE-2026-27597

creationtimestamp| type| source ---|---|--- 2026-02-22 21:10:36+00:00| published-proof-of-concept| https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942 2026-02-25 04:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt77pasz2c 2026-02-25...

Authorization Bypass

askbot is vulnerable to Authorization Bypass. The vulnerability is due to an incomplete permissions check, where an attacker authenticated with normal user permissions can modify the profile picture of other application users...

CVE-2026-27002

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 block...

CVE-2026-27002 OpenClaw: Docker container escape via unvalidated bind mount config injection

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 block...

CVE-2026-27002 OpenClaw: Docker container escape via unvalidated bind mount config injection

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 block...

Using AI to defeat AI

Welcome to this week's edition of the Threat Source newsletter. Generative AI and agentic AI are here to stay. Although I believe that the advantages that AI brings to bad guys may be overstated, these new technologies allow threat actors to conduct attacks at a faster rate than before. One...

CVE-2026-25940

creationtimestamp| type| source ---|---|--- 2026-02-19 16:30:19+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf7zczbkxv2o 2026-02-19 16:30:21+00:00| seen| https://infosec.exchange/users/offseq/statuses/116098244070941374 2026-02-19 16:31:25+00:00| seen|...

CVE-2026-1436

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2019-25403

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter. Attackers can inject JavaScript code through the adminprofiles endpoint that executes in the browse...

CVE-2019-25403

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter. Attackers can inject JavaScript code through the adminprofiles endpoint that executes in the browse...