CVE-2026-64564

creationtimestamp| type| source ---|---|--- 2026-08-06 15:03:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett 2026-08-06 15:22:49+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117049246952190178 2026-08-06 15:25:14+00:00| seen|...

CVE-2026-32327

A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...

CVE-2026-32327

A stack recursion vulnerability exists in APR-util version 1.6.3 (and earlier) . The flaw occurs when the library parses XML from untrusted sources using the apr_xml_quote_elem() function, potentially leading to a Denial of Service or arbitrary code execution. Impacted components include the Apac...

EUVD-2026-53919

A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...

CVE-2026-66733

creationtimestamp| type| source ---|---|--- 2026-08-06 13:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117048804948021339 2026-08-06 13:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msg5m2k3dm27...

CVE-2026-5651

creationtimestamp| type| source ---|---|--- 2026-08-06 11:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfw24rww22r 2026-08-06 11:32:54+00:00| seen| https://bsky.app/profile/potato.software/post/3msfwzuowjz2s...

CVE-2026-1728

creationtimestamp| type| source ---|---|--- 2026-08-06 08:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dpb5ohyaumqjd 2026-08-06 09:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msfopqzrcd2f 2026-08-06 10:30:26+00:00| seen|...

CVE-2026-67531

creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/117045620857763460 2026-08-06 00:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mseqe45ddk2j 2026-08-06 01:16:06+00:00| seen|...

CVE-2026-71320

creationtimestamp| type| source ---|---|--- 2026-08-05 22:28:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gvetvo5bbputq 2026-08-05 23:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msemzqxdjn2x 2026-08-06 01:31:21+00:00| seen|...

CVE-2026-71319

creationtimestamp| type| source ---|---|--- 2026-08-05 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z 2026-08-05 22:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp 2026-08-05 23:01:06+00:00| seen|...

CVE-2026-34966

creationtimestamp| type| source ---|---|--- 2026-08-05 22:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejn75vir2g 2026-08-05 22:08:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4vzq7ps6ndqj2...

CVE-2026-71315

creationtimestamp| type| source ---|---|--- 2026-08-05 22:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmylyml2t 2026-08-05 22:14:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g56cs2qf35unw 2026-08-06 05:31:22+00:00| seen|...

subfinder v2.15.0

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2026-20312

creationtimestamp| type| source ---|---|--- 2026-08-05 18:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4avokdr2t 2026-08-05 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76v5c3vhzde4z 2026-08-06 13:10:12+00:00| seen|...

CVE-2026-9077

creationtimestamp| type| source ---|---|--- 2026-08-05 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4aiafpl2x 2026-08-05 18:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3rfvjndj5taqu 2026-08-07 15:07:06+00:00| seen|...

CVE-2026-20267

creationtimestamp| type| source ---|---|--- 2026-08-05 17:07:01+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdzafb4i22n 2026-08-05 17:20:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxrqzrr2l 2026-08-06 05:17:05+00:00| seen|...

CVE-2026-20272

creationtimestamp| type| source ---|---|--- 2026-08-05 17:07:01+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdzafb4i22n 2026-08-05 17:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse23ct2hz23 2026-08-06 05:17:16+00:00| seen|...

GHSA-M55F-7GQJ-FR98 Electron: Extension tab APIs operate across session boundaries

Impact Extension tab and scripting APIs were not scoped to the extension's own session. A malicious or compromised extension loaded into one session could navigate, script, and read from windows belonging to a different session. Apps are only affected if they load Chrome extensions via...

MAL-2026-12966 Malicious code in bnpl-blocks-independent-bnpl-preset-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9c82b8cf411cb022edae70d6911b9b52637506ce2d1f9556275bbd251cb87a index.js unconditionally requires./support on module load. support.js selects a platform-specific asset path, fetches an opaque binary over HTTPS fro...

Malicious code in bnpl-blocks-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370e12396e25d7b72ad12f12c31c986e976bd8341f5fa61baa8cd3bb469f968e On require, index.js loads loader.js, which assembles a Cloudflare Workers hostname oob-worker.cf.workers.dev via runtime.join'' string reassembly,...