23476 matches found
CVE-2026-14605
creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvrigd72r 2026-07-03 22:02:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkf6gjah2i 2026-07-03 22:19:59+00:00| seen|...
CVE-2026-53203
creationtimestamp| type| source ---|---|--- 2026-07-03 17:22:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2ppftyb2k...
CVE-2026-38969
creationtimestamp| type| source ---|---|--- 2026-07-03 17:19:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c...
CVE-2026-53222
creationtimestamp| type| source ---|---|--- 2026-07-03 15:55:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvtroutk2c...
CVE-2026-53223
creationtimestamp| type| source ---|---|--- 2026-07-03 15:53:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvptxwrp2y 2026-07-06 06:51:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
CVE-2026-59101
creationtimestamp| type| source ---|---|--- 2026-07-03 15:10:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdkwzky2i...
CVE-2026-59234 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion
Authorization Bypass Through User-Controlled Key CWE-639 in CalendarDeleteEventController app/Http/Controllers/Calendar/CalendarDeleteEventController.php, exposed at GET /calendar/event/delete/id, in Prospero Flow CRM before 5.5.3 allows a remote, authenticated attacker to delete arbitrary calend...
CVE-2026-9230
creationtimestamp| type| source ---|---|--- 2026-07-03 09:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbuoa3v62i 2026-07-03 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprhrglbwb2k 2026-07-03 22:35:41+00:00| seen|...
CVE-2026-12168
creationtimestamp| type| source ---|---|--- 2026-07-03 09:36:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaowulub2o 2026-07-25 15:00:05+00:00| seen| https://t.me/ZerodayAlert/749 2026-07-26 00:00:38+00:00| seen| https://t.me/ZerodayAlert/749...
CVE-2026-9080
Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...
CVE-2026-9080 UAF after pause in socket callback
Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...
CVE-2026-47897
creationtimestamp| type| source ---|---|--- 2026-07-03 01:22:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mppf2vbry22c 2026-07-03 10:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqekix6hr2a 2026-07-03 22:36:05+00:00| seen|...
CVE-2026-57671
creationtimestamp| type| source ---|---|--- 2026-07-03 00:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcg77jh522...
CVE-2026-58578
LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...
EUVD-2026-41420
LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...
CVE-2026-58578 LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import
LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...
CVE-2026-55119
creationtimestamp| type| source ---|---|--- 2026-07-02 18:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpopif3kwk2a 2026-07-03 07:27:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzgy6epo2n 2026-07-08 11:01:21+00:00| seen|...
EUVD-2026-36322
OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance...
GHSA-3C6J-HQ33-3JV4 OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance
Summary OpenClaw nodes send lifecycle events back to the gateway. In affected releases, a paired node could send an exec lifecycle event that was accepted without enough provenance tying it to an authorized system.run request. This issue affects the node event boundary. It does not allow an...