CVE-2026-65646

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:07+00:00| seen| https://t.me/captainsmok3rofficial/502...

Linux Distros Unpatched Vulnerability : CVE-2026-56854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and...

Unity Linux 20.1070e Security Update: python-setuptools (UTSA-2026-104947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104947 advisory. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude,...

CVE-2026-82017

creationtimestamp| type| source ---|---|--- 2026-08-28 22:37:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/buzdraobdsxip 2026-08-29 00:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l5fd2ov22...

GHSA-56WQ-X3WV-3FF4 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

Summary The SeaweedFS S3 API gateway did not reject .. path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy. The request URL path was hardened against traversal in 4.30 CVE-2026-54917, but the copy-source header was only checked for emptiness, so a .. segment in the...

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

Summary The SeaweedFS S3 API gateway did not reject .. path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy. The request URL path was hardened against traversal in 4.30 CVE-2026-54917, but the copy-source header was only checked for emptiness, so a .. segment in the...

CVE-2026-55378

creationtimestamp| type| source ---|---|--- 2026-08-28 22:08:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6es5gpzu25 2026-08-29 18:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muahfhddky2c...

CVE-2026-82291

creationtimestamp| type| source ---|---|--- 2026-08-28 22:02:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6eihl22427...

CVE-2026-82286

creationtimestamp| type| source ---|---|--- 2026-08-28 22:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6efw67we22 2026-08-29 07:00:04+00:00| seen| https://t.me/GithubRedTeam/100174 2026-08-29 23:00:07+00:00| seen|...

GHSA-V358-WF77-39XV klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

EUVD-2026-67942

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

CVE-2026-82333

creationtimestamp| type| source ---|---|--- 2026-08-28 20:16:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu66kfqf3k2k 2026-08-29 00:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l56jzev22 2026-08-29 00:33:51+00:00| seen|...

aiagent-detection-rules

aiagent-detection-rules Sigma-, Splunk-, Elastic- und YARA-Erkennungsregeln für den Claude-Code-Quellcode-Leak 31. März 2026 und den gleichzeitigen npm-Lieferkettenangriff. Am 31. März 2026 hat Anthropic versehentlich eine fehlkonfigurierte Source-Map in @anthropic-ai/[email protected]...

CVE-2026-81849

Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-DownloadContent document, to write arbitrary files outside the...

CVE-2026-82227

creationtimestamp| type| source ---|---|--- 2026-08-28 17:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu5tlpiz462z 2026-08-28 18:14:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76kajcsu7qwbx...

SUSE CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...