CVE-2026-2588

creationtimestamp| type| source ---|---|--- 2026-02-23 20:31:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkin4qheb2k 2026-02-23 20:33:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkiqo2bxm2s 2026-02-23 20:52:18+00:00| seen|...

CVE-2026-21863

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimv644b26 2026-02-23 20:32:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkiqgpgpw2s 2026-02-23 21:12:18+00:00| seen|...

CVE-2025-67733

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimlakdt25 2026-02-23 20:31:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinnkzsp2c 2026-02-23 21:07:19+00:00| seen|...

CVE-2026-27623

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkime3b3w2s 2026-02-23 20:31:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkingdasx2c 2026-02-23 21:32:19+00:00| seen|...

CVE-2026-27623 Valkey has Pre-Authentication DOS from malformed RESP request

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

GO-2026-4530 Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik

Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik...

CVE-2025-70044

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...

CVE-2025-40701 Reflected Cross-Site scripting (XSS) in SOTE's SOTESHOP

Reflected Cross-Site Scripting vulnerability in SOTESHOP, version 8.3.4. THis vulnerability allows an attacker execute JavaScript code in the victim's browser when a malicious URL with the 'id' parameter in '/adsTracker/checkAds' is sent to the victim. The vulnerability can be exploited to steal...

CVE-2026-2959

creationtimestamp| type| source ---|---|--- 2026-02-23 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfidv3dn2t2u 2026-02-23 00:00:55+00:00| seen| https://infosec.exchange/users/offseq/statuses/116117001877252256 2026-02-23 01:00:39+00:00| seen|...

OWASP Smart Contract Top 10

The OWASP Smart Contract Top 10: 2026 is a standard awareness document that aims to provide Web3 developers and security teams with insights into the top 10 vulnerabilities found in smart contracts. It is a sub‑project of the broader OWASP Smart Contract Security OWASP SCS initiative. It serves a...

OpenClaw, Moltbook, and ClawdLab: From Agent-Only Social Networks to Autonomous Scientific Research

In January 2026, the open-source agent framework OpenClaw and the agent-only social network Moltbook produced a large-scale dataset of autonomous AI-to-AI interaction, attracting six academic publications within fourteen days. This study conducts a multivocal literature review of that ecosystem a...

PT-2026-21548

Name of the Vulnerable Software and Affected Versions Valkey versions 9.0.0 through 9.0.2 Description Valkey, a distributed key-value database, is susceptible to a denial of service condition. A remote attacker with network access can cause the system to terminate by triggering an assertion. This...

CVE-2025-70044

The automated operation software fofolee uTools-quickcommand version 5.0.3 is affected by a security vulnerability (CWE-295) involving Improper Certificate Validation . This flaw stems from a lack of proper certificate checks, which can potentially lead to security compromises. As of the current ...

Fedora: Security Advisory (FEDORA-2026-c06fd97a53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-22021

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A previous fix for a heap-use-after-free issue was incomplete. The vulnerable code exists in the SDL2 implementation, where a pointer...

PT-2026-21560

Name of the Vulnerable Software and Affected Versions erzhongxmu JEEWMS versions up to 3.7 Description A flaw exists in erzhongxmu JEEWMS, specifically within the UEditor component, affecting the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp. The myEditor argument can be manipulated to...

Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.116/117 for Windows/Mac and 145.0.7632.116 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

FreeBSD : openexr -- buffer overflow in istream_nonparallel_read on invalid input data (716d25a6-0fdc-11f1-bfdf-ff9355aecb00)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 716d25a6-0fdc-11f1-bfdf-ff9355aecb00 advisory. Cary Phillips reports: openexr v3.4.5 ... fixes an incorrect size check in istreamnonparallelread that...

[SECURITY] Fedora 43 Update: python3.13-3.13.12-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

Web Ofisi E-Ticaret SQL注入漏洞

Web Ofisi E-Ticaret is an e-commerce system developed by the Turkish company Web Ofisi. The Web Ofisi E-Ticaret v3 version has a SQL injection vulnerability, which stems from insufficient input validation for the ‘a’ parameter. This vulnerability may lead to SQL injection attacks...