ROS-20260914-73-0070

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

CVE-2026-57583: Improper Control of Generation of Code

OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzeppelin/wizard-cairo 3.0.1, @openzeppelin/wizard-stellar 0.6.2, and @openzeppelin/wizard-stylus 0.3.1, the setInfo code...

espectre snapshot

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

CVE-2026-80912

creationtimestamp| type| source ---|---|--- 2026-09-13 20:50:07+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvghv7ytma2e 2026-09-13 20:50:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117265701617196467...

CVE-2026-89723

creationtimestamp| type| source ---|---|--- 2026-09-13 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgf4qveo624 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89748

creationtimestamp| type| source ---|---|--- 2026-09-13 16:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfxrdikcg22...

CVE-2026-78491

creationtimestamp| type| source ---|---|--- 2026-09-13 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfwfkcnbd2f...

CVE-2026-89479

creationtimestamp| type| source ---|---|--- 2026-09-13 13:20:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfoqm2ewt24 2026-09-19 04:30:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117295821790643814 2026-09-19 04:30:04+00:00| seen|...

CVE-2026-81002

creationtimestamp| type| source ---|---|--- 2026-09-13 13:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfo6nc4ig2n 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90779

creationtimestamp| type| source ---|---|--- 2026-09-13 13:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfnppg5dg24 2026-09-20 09:34:34+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvwvfozapp24 2026-09-20 12:10:33+00:00| seen|...

CVE-2026-90777

creationtimestamp| type| source ---|---|--- 2026-09-13 13:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfno3rry22b 2026-09-14 05:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhdbg2xk22r 2026-09-16 07:27:26+00:00| seen|...

CVE-2026-90772

creationtimestamp| type| source ---|---|--- 2026-09-13 11:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ey6j7kk7xxcr5 2026-09-13 12:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkgugkaq2s 2026-09-13 12:03:08+00:00| seen|...

CVE-2026-89669

creationtimestamp| type| source ---|---|--- 2026-09-13 11:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfhi4npsh2n 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769

Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90616

creationtimestamp| type| source ---|---|--- 2026-09-13 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263264954155475 2026-09-13 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvffb6fut32p...

CVE-2026-89650

creationtimestamp| type| source ---|---|--- 2026-09-13 10:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfeooeopg2t 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89643

creationtimestamp| type| source ---|---|--- 2026-09-13 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfe4qjakb22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...