CVE-2026-8889

CVE-2026-8889 affects the Securly Chrome Extension, version 3.0.7. The underlying issue is the use of deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). This weak crypto basis is cited across multiple sources (NVD, Red Hat, CERT, PT Sec...

CVE-2026-8889 CVE-2026-8889

Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching 25,020 hashes and CIPA blocklist matching 12,352 hashes...

CVE-2026-41283

creationtimestamp| type| source ---|---|--- 2026-06-03 17:37:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfngopmqq2d 2026-06-04 05:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtqx3mc725 2026-06-04 05:10:01+00:00| seen|...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-41032

creationtimestamp| type| source ---|---|--- 2026-06-03 13:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7rsc4m72v 2026-06-04 02:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjotiisf2s...

CVE-2025-15655

creationtimestamp| type| source ---|---|--- 2026-06-03 13:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7itomvd2d 2026-06-04 02:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjodno4l2l 2026-06-04 02:37:38+00:00| seen|...

CVE-2026-35077

creationtimestamp| type| source ---|---|--- 2026-06-03 13:15:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6wworug2d 2026-06-04 00:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcy4qrkm2q 2026-06-09 01:37:06+00:00| seen|...

CVE-2025-41259

creationtimestamp| type| source ---|---|--- 2026-06-03 13:05:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ezoyow2d 2026-06-04 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnhjzwy4m42p...

CVE-2026-25550

creationtimestamp| type| source ---|---|--- 2026-06-03 11:43:22+00:00| seen| https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618 2026-06-04 23:14:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mniquk35ws2f...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2026-8885

creationtimestamp| type| source ---|---|--- 2026-06-03 05:15:50+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnee4piqoh2c...

CVE-2026-21870

creationtimestamp| type| source ---|---|--- 2026-06-03 05:13:24+00:00| seen| https://bsky.app/profile/theresidentmachine.bsky.social/post/3mnedydo7z62r...

CVE-2026-7421

creationtimestamp| type| source ---|---|--- 2026-06-03 03:10:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne54cz3e32e 2026-06-03 23:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mngagm4t4t2t...

CVE-2026-9334

creationtimestamp| type| source ---|---|--- 2026-06-03 02:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne4fdfgs223...

CVE-2026-41412

creationtimestamp| type| source ---|---|--- 2026-06-03 02:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3yun5nu2g...

CVE-2026-9516

creationtimestamp| type| source ---|---|--- 2026-06-03 02:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3vbsygx2y 2026-06-03 07:15:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnekscgcm32i 2026-06-04 05:02:42+00:00| seen|...

CVE-2026-42507

creationtimestamp| type| source ---|---|--- 2026-06-03 02:41:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3iwbcgy25 2026-06-03 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2rtqtu32f 2026-06-08 13:20:20+00:00| seen|...

Server-side Request Forgery (SSRF)

Overview @wonderwhy-er/desktop-commander is a MCP server for terminal operations and file editing Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the readFileFromUrl function in filesystem.ts when processing the url argument. An attacker can access interna...

EUVD-2026-34037

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blendermcp/server.py of the component ZIP File Handler. The manipulation of the argument zipfileurl results in server-side request...