CVE-2026-29120

creationtimestamp| type| source ---|---|--- 2026-03-04 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116170085409421373 2026-03-04 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg7waokems2w 2026-03-04 09:53:45+00:00| seen|...

Malicious code in @vk-cloud-billing/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b5a4d83fe25260e7b73b7d40a2d8827f8ebe841ace75e3f03140b4861eb836 The package @vk-cloud-billing/common was found to contain malicious code. Source: ghsa-malware...

BIT-KIBANA-2026-26937 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation CAPEC-153...

DEBIAN-CVE-2026-27631

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

CVE-2025-50187

creationtimestamp| type| source ---|---|--- 2026-03-02 16:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3mrteptp2k 2026-03-02 18:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3udbmqow2u 2026-03-03 20:00:16+00:00| seen|...

SIP Service Providers – Possible Impersonation of Poly Voice Device

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate. Service...

ATLAS: AI-Assisted Threat-To-Assertion Learning for System-On-Chip Security Verification

This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip SoC security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration CWE, ATLAS identifies SoC-specific assets, maps...

CVE-2026-28351

creationtimestamp| type| source ---|---|--- 2026-02-27 23:22:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu3dkef724 2026-02-28 07:10:10+00:00| seen| https://gist.github.com/alon710/8c701e4c3b2c6c36535c668dab067b3c 2026-02-28 07:29:32+00:00| seen|...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Thunderbird 140.7.2 CVE-2026-2447: Fixed a heap buffer overflow in libvpx. bsc1258231 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1059 Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-26207

creationtimestamp| type| source ---|---|--- 2026-02-26 19:38:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrx3v37zi2v...

Exploit for CVE-2026-2636

CVE-2026-2636: CLFS.sys Unrecoverable State Leading to BSoD !...

CVE-2026-2751

creationtimestamp| type| source ---|---|--- 2026-02-26 14:40:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524 2026-02-27 14:10:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s 2026-02-28 07:15:26+00:00| seen|...

Report Finds Just 1% of Security Flaws Drive Most Cyberattacks in 2025

New VulnCheck research reveals that while thousands of CVEs are discovered yearly, only 1% drive real-world impact...

CVE-2026-25963

creationtimestamp| type| source ---|---|--- 2026-02-26 05:23:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhdcziuw27...

CVE-2026-25882 vulnerabilities

Vulnerabilities for packages: gatus, gatus-fips...

Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization around source building golang-github-lusitaniae-apacheexporter: Build without apparmor for openSUSE Leap 16, SLES 16 or newer Require Go 1.23 for building Update to version 1.0.1...

SUSE-SU-2026:0627-1 Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization around source building golang-github-lusitaniae-apacheexporter: - Build without apparmor for openSUSE Leap 16, SLES 16 or newer - Require Go 1.23 for building - Update to versi...

SUSE-SU-2026:0626-1 Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization around source building golang-github-lusitaniae-apacheexporter: - Build without apparmor for openSUSE Leap 16, SLES 16 or newer - Require Go 1.23 for building - Update to versi...