CVE-2026-71164

creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb7fpve52m 2026-08-19 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgfocbhk22y 2026-08-19 17:16:54+00:00| seen|...

CVE-2026-62637

creationtimestamp| type| source ---|---|--- 2026-08-18 22:19:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqfzned2j 2026-08-19 05:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb77ug323 2026-08-19 17:21:17+00:00| seen|...

kill-chain-vulnerability-scanner

Kill Chain Scanner A Python-based automated web applicatio...

CVE-2026-73930

creationtimestamp| type| source ---|---|--- 2026-08-18 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf7pmeark2t 2026-08-18 22:29:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbcr4kzg2j 2026-08-19 10:20:05+00:00| seen|...

CVE-2026-73918

...

CVE-2026-73916

Helidon 3.2.18 (Oracle Fusion Middleware, Imperative Web Server component) is affected by a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated attacker over HTTP, granting unauthorized access to all Helidon-accessible data and enabling creation, deletion, or modification of criti...

CVE-2026-71167

Helidon 4.5.0's Imperative Web Server component is critically vulnerable (CVSS 9.4) to unauthenticated, remote HTTP attacks allowing full data compromise and partial DoS. No public exploit or root-cause details are provided; Oracle has released patches per its August 2026 CPU advisory.

CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...

CVE-2026-71037

...

CVE-2026-71034

...

CVE-2026-70847

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-62633

Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...

CVE-2026-61016

...

CVE-2026-60921

...

CVE-2026-60905

...

CVE-2026-60781

...

CVE-2026-66780

creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c 2026-08-18 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j 2026-08-20 12:59:58+00:00| seen|...

GHSA-8J49-MMCX-4MP5 MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

Summary The findiconpathzip function in MobSF does not properly sanitize the android:icon attribute extracted from an Android manifest before resolving it as a filesystem path. An attacker can supply a malicious android:icon value containing path traversal sequences, causing MobSF to read arbitra...

MobSF has SSRF port restriction bypass in assetlinks_check

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with validhost, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in validhost and lets a crafted APK cause...