CVE-2026-46215

creationtimestamp| type| source ---|---|--- 2026-06-29 12:49:04+00:00| seen| https://bsky.app/profile/linkersec.bsky.social/post/3mpgjkues7s2o 2026-06-29 12:49:24+00:00| seen| https://bsky.app/profile/linkersec.bsky.social/post/3mpgjlgty6s2o 2026-06-29 18:08:50+00:00| seen|...

CVE-2026-13553

creationtimestamp| type| source ---|---|--- 2026-06-29 11:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpggeworr225 2026-06-29 14:06:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpgnuv2el52b...

PYSEC-2026-553 TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...

Code Injection in paddlepaddle

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...

CVE-2026-57346

creationtimestamp| type| source ---|---|--- 2026-06-29 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832929520702680 2026-06-29 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpgbtbqce425 2026-07-05 19:16:18+00:00| seen|...

CVE-2026-22078

creationtimestamp| type| source ---|---|--- 2026-06-29 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832575628329249 2026-06-29 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpg4sdsfah27 2026-06-29 11:36:08+00:00| seen|...

CVE-2026-13543

creationtimestamp| type| source ---|---|--- 2026-06-29 08:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3umb4vk2y 2026-06-29 11:21:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgeo73rxb2b 2026-06-29 12:41:08+00:00| seen|...

CVE-2026-10083

creationtimestamp| type| source ---|---|--- 2026-06-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832221707811519 2026-06-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfxrflfcf2b 2026-06-29 07:54:05+00:00| seen|...

CVE-2026-13517

creationtimestamp| type| source ---|---|--- 2026-06-29 04:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfnpmrrnt2g 2026-06-29 04:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfogzgbm62z 2026-06-29 05:02:01+00:00| seen|...

PT-2026-53621

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

PT-2026-53526

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...

CVE-2026-13501

creationtimestamp| type| source ---|---|--- 2026-06-28 18:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekt3enxj2p 2026-06-28 19:31:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepm7syd22u 2026-06-29 19:44:25+00:00| seen|...

CVE-2026-13504

creationtimestamp| type| source ---|---|--- 2026-06-28 17:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekb6izsd2u 2026-06-28 19:28:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepfk2nxr2c...

CVE-2026-13498

creationtimestamp| type| source ---|---|--- 2026-06-28 14:20:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe67psnga2t 2026-06-28 14:36:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe74wouru2m 2026-06-29 19:30:51+00:00| seen|...

CVE-2026-13497

creationtimestamp| type| source ---|---|--- 2026-06-28 14:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe54zlv2n2u 2026-06-28 14:38:11+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe77bhkbv23 2026-06-29 15:28:53+00:00| seen|...

zuixingongju-resources

zuixingongju-resources HW Red Team Arsenal – Resource fil...

CVE-2026-12415

creationtimestamp| type| source ---|---|--- 2026-06-27 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u 2026-06-27 06:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s 2026-06-27 06:25:12+00:00| seen|...

Unsafe Dependency Resolution

Overview @pnpm/building.policy is a Create a function for filtering out dependencies that are not allowed to be built Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the approval process for dependency sources. An attacker can execute unauthorized code during...

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merged upstream commit bf1b731ee6 fixed the original name-only approval bypass by making build policy consume the resolved dependency identity. One collision remained: the generic...

Cargo crates in third party registries can override the cached source of other crates

The Rust Security Response Team was notified that Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. This vulnerability is tracked as CVE-2026-5223. The...