9609 matches found
CVE-2026-5605
creationtimestamp| type| source ---|---|--- 2026-04-06 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116354818818250445 2026-04-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mirxhp6vtu2f 2026-04-06 01:15:46+00:00| published-proof-of-concept|...
CVE-2026-5574
creationtimestamp| type| source ---|---|--- 2026-04-05 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4vbrh3322...
CVE-2026-39305
creationtimestamp| type| source ---|---|--- 2026-04-05 04:59:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jfxc-v5g9-38xr 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE 2026-04-16 03:07:07+00:00|...
CVE-2026-5532
creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...
CVE-2026-34588
creationtimestamp| type| source ---|---|--- 2026-04-05 02:01:10+00:00| seen| https://bsky.app/profile/slackers.it/post/3mipnqc75xj2n 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...
BELL-CVE-2026-34979
Bulletin has no description...
CVE-2026-22663
creationtimestamp| type| source ---|---|--- 2026-04-03 22:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimsdyfjmg2g 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:01+00:00| seen|...
Do not get high(jacked) off your own supply (chain)
In the span of just a few weeks, we have observed a dizzying array of major supply chain attacks. Prominent examples include the malicious modification of Axios, a popular HTTP client library for JavaScript, as well as cascading compromises from TeamPCP, a "chaos-as-a-service" group that injected...
CVE-2026-35507
creationtimestamp| type| source ---|---|--- 2026-04-03 04:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktznighg2q...
CVE-2026-2950 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kibana, pelias-api, jitsucom-jitsu, saf, kubeflow-pipelines, argo-workflows, vitess, renovate, semaphore, redisinsight, wazuh-dashboard-fips, prism, json-server, kubeflow-centraldashboard, kubeflow-katib, ts-patch, gitlab-rails-ce,...
CVE-2026-34833
creationtimestamp| type| source ---|---|--- 2026-04-02 20:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3uzxlow23 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...
CVE-2026-34877
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is cause...
CVE-2025-68753
creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...
CVE-2026-5333
creationtimestamp| type| source ---|---|--- 2026-04-02 14:04:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijeqgfei427 2026-04-02 15:21:36+00:00| seen| Telegram/c85hrsWNyFYwFes4s7T57trjOQm7U5y5MEbFlOtoT8A7NA 2026-04-08 05:40:09+00:00| seen|...
CVE-2026-34531
Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth would invoke the application's token...
CVE-2026-5244
A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mgtlsrecvcert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pubkey leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been...
CVE-2026-23413
creationtimestamp| type| source ---|---|--- 2026-04-02 12:47:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116335185440605181 2026-04-24 17:19:06+00:00| seen| Telegram/JJSTAL9Od5belnpNTeT7EllHotzG8ircS1PMboCiKcbiY...
CVE-2026-29137
creationtimestamp| type| source ---|---|--- 2026-04-02 10:31:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiyublvrn2q...
Inside the Talos 2025 Year in Review: A discussion on what the data means for defenders
Every year, the Cisco Talos Year in Review captures the patterns shaping the threat landscape. The 2025 report paints a clear picture: Attackers are moving faster than ever, while using identity-related attacks as the primary battleground. To unpack the biggest takeaways and what they mean for...