CVE-2026-8323

URL redirection to untrusted site 'open redirect' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2...

GHSA-5293-FCM6-FH8V

creationtimestamp| type| source ---|---|--- 2026-09-10 09:00:06+00:00| seen| https://t.me/GithubRedTeam/101902 2026-09-10 23:00:04+00:00| seen| Telegram/IahIDovOHUenK705G5amLwAL2bDi62zGVyXyTFrKtdPZaM 2026-09-11 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-8323

An open redirect vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (versions before Version 2 ) allows an attacker to redirect users to an untrusted site, thereby faking the source of data . The CNA-assigned CVSS 3.1 score is 9.3 (CRITICAL) with vector CVSS:3.1/AV:N/...

EUVD-2026-75328

URL redirection to untrusted site 'open redirect' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2...

CVE-2026-8323 Open Redirect in Armiya Information Technologies' Access Control System

URL redirection to untrusted site 'open redirect' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2...

CVE-2026-8323 Open Redirect in Armiya Information Technologies' Access Control System

URL redirection to untrusted site 'open redirect' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2...

CVE-2026-82779

creationtimestamp| type| source ---|---|--- 2026-09-10 08:46:03+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...

jadx-magic-strings v1.0.3-dev

JADX Magic Strings Plugin A JADX plugin that extracts information from string constants. Features The plugin extracts and analyzes string constants from decompiled code to find: 1. Source File References : Detects references to Java/Kotlin source files .java, .kt, .kts, .scala, .groovy in string...

CVE-2026-14873

creationtimestamp| type| source ---|---|--- 2026-09-10 06:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv5etecm6t2p...

PCAPdroid v2.0.1

PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...

CVE-2026-18351

creationtimestamp| type| source ---|---|--- 2026-09-10 03:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/117244508969713610 2026-09-10 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv52pwtwai25 2026-09-10 03:40:03+00:00| seen|...

CVE-2026-87613

creationtimestamp| type| source ---|---|--- 2026-09-10 03:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv52p4bjh42t 2026-09-10 05:15:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 20:37:06+00:00| seen|...

SUSE CVE-2026-73324

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

CLEANSTART-2026-KR69944 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the haproxy-ingress package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references...

CLEANSTART-2026-TD59374 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the haproxy-ingress package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references...

CLEANSTART-2026-BM73754 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the haproxy-ingress package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references...

CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database

Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...

PT-2026-89615

Name of the Vulnerable Software and Affected Versions mruby version 4.0.0 Description A NULL pointer dereference occurs in the Prism parser component. An attacker can use a specially crafted Ruby source file to cause the parser to pass a NULL pointer to nonnull string handling functions, leading ...

ROS-20260910-73-0100

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...