CVE-2026-14080

creationtimestamp| type| source ---|---|--- 2026-07-02 06:22:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfeopjtz2b 2026-07-02 07:51:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:45:24+00:00| seen|...

CVE-2026-14077

creationtimestamp| type| source ---|---|--- 2026-07-02 01:45:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvviwwfd27 2026-07-02 07:51:38+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:45:13+00:00| seen|...

CVE-2026-5142

creationtimestamp| type| source ---|---|--- 2026-07-02 00:35:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmry7olzh2y 2026-07-02 01:57:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwlmecux27 2026-07-02 08:10:19+00:00| seen|...

Trust Boundary Semantic Gaps: A Multi-Dimensional Analysis and Mitigation for Security-By-Design

Modern systems use format-, protocol-, and signature-based mechanisms before accepting artifacts across trust boundaries. These mechanisms are necessary: they show that an artifact is well formed, protocol-compliant, or properly authenticated. They do not, however, show that the artifact satisfie...

CVE-2026-38968: Predictable from Observable State

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

PT-2026-55303

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 6.7 Description Predictable session identifiers can lead to session hijacking. The issue occurs because HTTP session identifiers in the src/HTTPserver.cpp file use weak time-seeded pseudo-randomness during session...

CVE-2026-38968

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

PT-2026-54949

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp load more revs AJAX action in versions up to, and including, 12.7.2. The parameter is read via $ POST'notinstring' and passed through sanitize text field — which strips HTML an...

PT-2026-55271

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 25.3 through 29.0.2 Erlang/OTP versions 28.x prior to 28.5.0.3 Erlang/OTP versions 27.x prior to 27.3.4.14 ssl versions 10.9 through 11.7.2 ssl versions 11.6.x prior to 11.6.0.3 ssl versions 11.2.x prior to 11.2.12.10...

Knowledge over Parameters: Evolving Smart Contract Vulnerability Detection

Smart contract vulnerabilities are predominantly logic bugs whose detection requires structured, step-by-step procedural knowledge of attack patterns and contract semantics. Existing LLM-based methods struggle to generate this knowledge automatically: prompt-based methods rely on manually crafted...

CVE-2026-53351

creationtimestamp| type| source ---|---|--- 2026-07-01 22:46:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvv3owd2d 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-53340

creationtimestamp| type| source ---|---|--- 2026-07-01 22:26:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkrk2x5l2r 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-14114

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmitplxfe2y 2026-07-02 01:39:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvk3ipal2q 2026-07-02 08:17:28+00:00| seen|...

CVE-2026-14106

creationtimestamp| type| source ---|---|--- 2026-07-01 21:50:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmiruavlx24 2026-07-02 08:16:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:25+00:00| seen|...

CVE-2026-34111

creationtimestamp| type| source ---|---|--- 2026-07-01 21:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmiglyzbt2k 2026-07-02 04:43:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7tpyc5c2y 2026-07-02 09:28:31+00:00| seen|...

CVE-2026-13999

creationtimestamp| type| source ---|---|--- 2026-07-01 21:17:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgwfxuab26 2026-07-02 07:48:50+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:21:14+00:00| seen|...

CVE-2026-14002

creationtimestamp| type| source ---|---|--- 2026-07-01 21:15:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgsnjran2y 2026-07-01 21:15:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgsniedp23 2026-07-02 07:48:56+00:00| seen|...

MAL-2026-6718 Malicious code in test-pkg-yarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...

Malicious code in test-pkg-yarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...

MAL-2026-6717 Malicious code in test-pkg-x0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0014944456f668a25fa484bf7cb5f36a7128d6a585b86d9294d8d49b23049a Package declares scripts.postinstall pointing at shim.js, a script that runs unconditionally on npm install. shim.js branches on uname -s...