CVE-2026-53414

creationtimestamp| type| source ---|---|--- 2026-08-12 15:11:56+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3msvg32kqka2h 2026-08-12 23:07:05+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mswamngs2k2w 2026-08-14 14:24:46+00:00| seen|...

de4py v3.3.2-stable

de4py ⚠️ de4py is FREE & OPEN SOURCE CC BY-NC 4.0. Any paid versions sold elsewhere or commercial use are NOT permitted. If you paid for de4py, you were misled. De4py is an advanced Python deobfuscator with a beautiful UI PySide6 and a robust set of features for malware analysts and reverse...

guarddog v3.2.0

GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...

CVE-2026-19559

creationtimestamp| type| source ---|---|--- 2026-08-12 12:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23 2026-08-12 16:45:05+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67 2026-08-13 09:48:26+00:00| seen|...

ROS-20260812-73-0025

The vulnerability of the Wireshark parser for analyzing BLF files related to traffic analysis in computer networks is linked to errors during initialization. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

ROS-20260812-73-0023

The vulnerability in Wireshark is related to overflowing of buffers in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Black Hat Europe 2023 Conference Slides

Black Hat Europe 2023 conference slides for topics Unmasking APTs: An Automated Approach for Real-World Threat Attribution, How I Learned to Stop Worrying and Build a Modern Detection & Response Program, The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread...

SUSE CVE-2026-68091

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

SUSE CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

Aegis aegis-v0.11.0-alpha

AEGIS OS-level oversight for AI coding agents Open-source monitor that shows what AI coding agents actually do on your machine — at the OS level, no agent hooks required. AEGIS sees every AI agent on your machine — even ones that don't cooperate. It is an independent, OS-level observer that watch...

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment,...

CVE-2026-73232

creationtimestamp| type| source ---|---|--- 2026-08-11 21:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mstj3z6ovz2t...

UBUNTU-CVE-2026-48813

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

njsscan v1.0.0

njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...

CVE-2026-43606

CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...

MAL-2026-13738 Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

Cybersecurity-writeups-

Security Write-ups A collection of cybersecurity case studies...

CVE-2026-66777

creationtimestamp| type| source ---|---|--- 2026-08-11 03:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7rq7fx366ozh7 2026-08-13 08:48:17+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...