EUVD-2026-66718

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

CVE-2026-62326

Weblate , a web-based continuous localization platform, contains an uncontrolled resource consumption vulnerability in versions prior to 2026.7 . A user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags (via the regex: quality check or regex ...

CVE-2026-62326

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

CVE-2026-62326 Weblate Has Uncontrolled Resource Consumption via

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

CVE-2026-47842

creationtimestamp| type| source ---|---|--- 2026-08-26 20:21:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76s2cpigem3uh...

CVE-2026-47834

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15...

CVE-2026-81027

creationtimestamp| type| source ---|---|--- 2026-08-26 20:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4qtslaz2z...

flowsint v1.2.12

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

MISP v2.5.45

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

curl: 36: HTTP upload resume offset consumed twice after early 307/308 redirect

Summary A read-backed HTTP POST using CURLOPTRESUMEFROMLARGE with a non-seekable source silently uploads the wrong data when the server returns a 307 or 308 redirect before the request body is sent. curleasyperform returns CURLEOK, so the caller cannot detect the substitution. The bug is in...

crowdsec v1.8.0-rc2

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

CVE-2026-81035

creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/anvxu5rxth3qo...

CVE-2026-81034

creationtimestamp| type| source ---|---|--- 2026-08-26 16:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5btja4khie34t...

CVE-2026-75062

creationtimestamp| type| source ---|---|--- 2026-08-26 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtyptvornt23 2026-08-26 18:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywfxuqju2e...

CVE-2026-74848

creationtimestamp| type| source ---|---|--- 2026-08-26 15:37:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/isgyihvqh5n7s 2026-08-27 10:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jciqmqkiujfkw...

infisical v0.162.24

The open-source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Slack | Infisical Cloud | Self-Hosting | Docs | Website | Twitter | Hiring Remote/SF Introduction Infisical is the open source security infrastructure platform that teams us...

CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-18080

creationtimestamp| type| source ---|---|--- 2026-08-26 12:21:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy52s6sgxysq2 2026-08-26 12:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtye4fhhlk2e 2026-08-26 23:00:03+00:00| published-proof-of-concept|...

CVE-2026-77551

creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtybuvhrho24 2026-08-27 07:00:03+00:00| seen| https://t.me/GithubRedTeam/99900 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LI...