CVE-2018-12993

creationtimestamp| type| source ---|---|--- 2026-06-25 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4w4tgjlu2d...

[SECURITY] Fedora 43 Update: goose-1.36.0-1.fc43

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

[SECURITY] Fedora 44 Update: goose-1.36.0-1.fc44

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

CVE-2026-41120

creationtimestamp| type| source ---|---|--- 2026-06-25 15:37:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4r462wol2e 2026-06-26 10:37:19+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116815969097431434 2026-06-27 04:37:06+00:00| seen|...

CVE-2020-10374

creationtimestamp| type| source ---|---|--- 2026-06-25 06:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp3swbwyyt2n...

CVE-2026-9782

creationtimestamp| type| source ---|---|--- 2026-06-25 01:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bvqjsud2g 2026-06-30 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjgrrwxou2v...

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors. In this work, we first show that, despite claims, existing problem-space attacks remain largely impractical. Most techniques leverage software transplantation to inject entire beni...

CVE-2026-46423

creationtimestamp| type| source ---|---|--- 2026-06-24 22:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2x5igyyv27...

CVE-2026-54067

SiYuan (prior to v3.7.0) is affected by a stored XSS in renderSnippet() where a CSS snippet containing breaks out of the surrounding tag during insertion, enabling injected JavaScript in the renderer. In Electron builds with nodeIntegration: true, this can reach Node APIs (e.g., child_process) a...

CVE-2026-53126

creationtimestamp| type| source ---|---|--- 2026-06-24 18:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jobrblk2p 2026-07-23 21:22:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrgizhlh2x...

Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. Prior to version 1.16.4, the Flatpak portal allowed paths in the sandbox-expose options, which could be app-controlled symbolic links pointing to arbitrary paths. Flatpak’s “flatpak run” command mounted the resolved host path i...

CVE-2026-56337

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...

CVE-2026-56257

Capgo before 12.128.2 allows direct patching of public.apps.ownerorg through PostgREST, bypassing the transferapp workflow and creating split-brain ownership. Attackers can directly update apps.ownerorg while leaving appversions.ownerorg unchanged, enabling old-org keys to retain access to versio...

CVE-2021-32988

creationtimestamp| type| source ---|---|--- 2026-06-24 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mozyaqqr3u2k...

CVE-2026-56337 Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...

EUVD-2026-38751

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...

CVE-2026-56337

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...

CVE-2026-56337

Capgo before 12.128.2 has an information disclosure in the public.exist_app_v2 RPC function that lets unauthenticated attackers enumerate app_ids via POST /rest/v1/rpc/exist_app_v2 with arbitrary appid parameters. This SECURITY DEFINER function can reveal whether specific app_ids exist in the pub...

CVE-2026-56302 Capgo - Unsecured Supabase Images Bucket via Missing Row Level Security

Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. Remote attackers can exploit this misconfiguration to delete all icons and leak sensitive app IDs and user IDs...

EUVD-2026-38749

Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. Remote attackers can exploit this misconfiguration to delete all icons and leak sensitive app IDs and user IDs...