18505 matches found
CVE-2025-48651
creationtimestamp| type| source ---|---|--- 2026-04-06 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0399/ 2026-04-09 10:24:22+00:00| seen| https://bsky.app/profile/stefan.infosec.exchange.ap.brid.gy/post/3mj2lplh4wbx2 2026-04-10 16:18:38+00:00| seen|...
Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins
New Phishing scam uses fake missile alerts and the ongoing conflict involving Iran to target users with QR codes and fake government emails to steal Microsoft passwords...
CVE-2026-21381
creationtimestamp| type| source ---|---|--- 2026-04-06 16:24:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitogsu44t2h 2026-04-06 17:32:33+00:00| seen| Telegram/mCOSTqPiKnBsCJ7wgUXnJ9sN78eybUSXsSSUkGvS3qtdJ4k 2026-04-09 04:20:09+00:00| seen|...
Why Security Researchers and Red Teams Are Turning to Workflow Automation
Security researchers and red teams adopt workflow automation to cut alert fatigue, enrich data, and scale operations across SOC, intel and recon tasks...
CVE-2026-5637
creationtimestamp| type| source ---|---|--- 2026-04-06 10:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2suo7fu2g 2026-04-06 11:15:48+00:00| published-proof-of-concept| Telegram/Z9ilPgM8N-vlYjxsXZCfRRqxqCtJw33K7Kit4-JTjgItxjI...
CVE-2026-5612
creationtimestamp| type| source ---|---|--- 2026-04-06 04:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3misevnz7or2d 2026-04-06 05:16:26+00:00| published-proof-of-concept| Telegram/kWexhLh74l4dPPtnd5KMBhXNW8mWfIV9fawO6hseg4Rc4 2026-04-06 06:28:54+00:00| seen|...
CVE-2026-5580
creationtimestamp| type| source ---|---|--- 2026-04-05 19:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirj7ze5bb27...
CVE-2026-35615
creationtimestamp| type| source ---|---|--- 2026-04-05 05:01:37+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-693f-pf34-72c5 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE...
PT-2026-30464
🚨 LIVE HIJACK ALERT — CVE-2026-77777. CVSS 8.9. attacker feeds poisoned task output to CrewAI agent memory. future tasks execute attacker instructions as if they were original goals. investigating. 🧵...
CVE-2026-35492
creationtimestamp| type| source ---|---|--- 2026-04-04 15:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/78769 2026-04-04 21:00:04+00:00| published-proof-of-concept| Telegram/uiceu604qpWHg6nRtttwpOPRlnEzPjnRfn6r5hc8j5w-A...
@budibase/backend-core (>=3.0.0 <=3.2.26), @budibase/bbui (>=3.0.0 <=3.2.26) +6 more potentially affected by CVE-2026-35216 via @budibase/shared-core (>=3.0.0 <=3.2.7)
@budibase/shared-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-35216 Source advisory: SNYK:JS-BUDIBASESHAREDCORE-15917499...
CVE-2026-34228
creationtimestamp| type| source ---|---|--- 2026-04-04 00:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimx5cnyjg2o 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
GHSA-XW59-HVM2-8PJ6
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo...
CVE-2025-43462
creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:39+00:00| seen| Telegram/nC1rcVaIKRlluIkCYLEMeSqa4PQwbBPwMLZdSyXRMrqHgM 2026-04-02 22:20:56+00:00| seen| Telegram/Vwk8vKhOFNDS6JM2yCv9XSPx-NaP1qDSk3KCYnu2uDrc7N0...
GHSA-XVWW-XHX6-22PF
creationtimestamp| type| source ---|---|--- 2026-04-02 19:26:54+00:00| seen| Telegram/Wnflj9AVRNFcbzmT8RV9QbE39gd8mxBym86BZleqlS4uOZ8...
CVE-2026-34759 OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure
OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...
CVE-2026-34759
Affected software: OneUptime Open Source platform (prior to v10.0.42). Vulnerability: Multiple notification API endpoints were registered without authentication middleware, exposing /notification/ and enabling an unauthenticated attacker to exploit a projectId leak from the public Status Page API...
CVE-2025-39923
creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...