CVE-2026-37525

AGL app-framework-binder afb-daemon through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The onsupervisioncall function in src/afb-supervision.c explicitly nullifies the request credentials by calling afbcontextchangecred&xreq-context, NULL before...

CVE-2019-25547

creationtimestamp| type| source ---|---|--- 2026-04-30 23:13:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkqqim32k72k...

CVE-2026-7435

creationtimestamp| type| source ---|---|--- 2026-04-30 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqpl5zgq22v...

CVE-2026-4503

creationtimestamp| type| source ---|---|--- 2026-04-30 21:45:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326 2026-04-30 22:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t...

CVE-2026-3861

LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causing the iOS device to become temporarily...

Missing Authorization

Overview org.jenkins-ci.plugins:github-branch-source is a multibranch projects and organization folders from GitHub. Maintained by CloudBees, Inc. Affected versions of this package are vulnerable to Missing Authorization in the GitHubAppCredentials descriptor through the testConnection handler. A...

WOOTdroid: Whole-System Online On-Device Tracing for Android

System auditing on Android faces two problems. First, existing syscall tracers lose events under load, silently overwriting entries faster than a user space reader can drain them. Second, security-relevant application behavior is mediated through Binder, Android's kernel IPC mechanism, and is...

CVE-2018-25310

creationtimestamp| type| source ---|---|--- 2026-04-29 20:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknx4o6xr22e...

CVE-2018-25316

creationtimestamp| type| source ---|---|--- 2026-04-29 20:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwr3n25e2k 2026-04-29 20:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknyiqt73m2e 2026-05-04 20:07:07+00:00| seen|...

CVE-2026-40229

creationtimestamp| type| source ---|---|--- 2026-04-29 18:40:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknqrw4wum2o...

webkitgtk: Processing maliciously crafted web content may disclose internal states of the app

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory initialization issue due to improper memory handling and result in the disclosure of the internal states of the application...

Malicious Package

Overview apple-app-store-server-library-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CVE-2026-42522

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...

CVE-2026-42522

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...

CVE-2026-42522

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...

CVE-2026-42522

The vulnerability CVE-2026-42522 affects Jenkins’ GitHub Branch Source Plugin (versions including 1967.vdea_d580c1a_b_a_ and earlier). The root cause is a missing permission check that permits attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified GitHub App ...

CVE-2026-42522

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...

CVE-2026-7275

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a 2026-07-13 22:00:04+00:00| seen|...

Taking a Bite out of the Forbidden Fruit: Characterizing Third-Party Iranian IOS App Stores

Due to U.S. sanctions and strict internet censorship, Iranian iOS users are barred from accessing the Apple App Store and developer services. In response, despite violating Apple's developer terms, a thriving underground ecosystem of third-party iOS app stores has emerged to serve Iranian users...

PT-2026-35916

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea d580c1a b a and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...