CVE-2026-60905

...

CVE-2026-60781

...

CVE-2026-66780

creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c 2026-08-18 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j 2026-08-20 12:59:58+00:00| seen|...

GHSA-8J49-MMCX-4MP5 MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

Summary The findiconpathzip function in MobSF does not properly sanitize the android:icon attribute extracted from an Android manifest before resolving it as a filesystem path. An attacker can supply a malicious android:icon value containing path traversal sequences, causing MobSF to read arbitra...

MobSF has SSRF port restriction bypass in assetlinks_check

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with validhost, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in validhost and lets a crafted APK cause...

CVE-2026-67926

creationtimestamp| type| source ---|---|--- 2026-08-18 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtensa47722u...

CVE-2026-32474

creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelzuzwln23 2026-08-18 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteqllljvl23...

diaphora v3.4.2

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

MINI-63Q3-CM3F-PQGP

Bulletin has no description...

qwen3.8-27b-cyber-exploit-agent

--- libraryname: peft basemodel: AEON-7/Qwen3.8-27B-AEON-ULTIM...

MAL-2026-14123 Malicious code in @oyo_tech/oyochat_user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2211869e361bf0cd90956a5c1dae972927c25c1d52e5ed4729cddc7b67fe682e @oyotech/[email protected] is a dependency-confusion probe. package.json declares a preinstall script that runs node -e...

certgraveyard_yara v2026.08.18

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

MINI-9XJQ-2H3V-7GHF

Bulletin has no description...

BELL-CVE-2026-74427

Bulletin has no description...

CVE-2026-17481

creationtimestamp| type| source ---|---|--- 2026-08-18 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtdffflozx24 2026-09-07 02:04:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3muvg63slgl2u...

CVE-2026-11801

creationtimestamp| type| source ---|---|--- 2026-08-18 04:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtdezjzll22r 2026-08-18 05:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdgpvlkpw2r...

Linux Distros Unpatched Vulnerability : CVE-2026-72484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if...

PT-2026-77243

Name of the Vulnerable Software and Affected Versions MobSF versions prior to 4.5.1 Description The find icon path zip function in mobsf/StaticAnalyzer/views/android/icon analysis.py fails to properly validate the android:icon value from the Android manifest. This allows an authenticated user to...

Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem

The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...

Joern 4.0.605

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...