CVE-2025-71380

creationtimestamp| type| source ---|---|--- 2026-07-04 05:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpscq5xwk62k 2026-07-04 07:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsiguotxr26...

CVE-2026-58419

creationtimestamp| type| source ---|---|--- 2026-07-04 02:11:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a...

CVE-2026-57986

creationtimestamp| type| source ---|---|--- 2026-07-03 23:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mprnx3zpds2x 2026-07-05 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw2gvrk3w2g 2026-07-06 07:49:17+00:00| seen|...

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23...

CVE-2026-11352

creationtimestamp| type| source ---|---|--- 2026-07-03 21:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprioe4hwb2n 2026-07-07 20:02:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq3fjgesej2n...

CVE-2026-14605

creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvrigd72r 2026-07-03 22:02:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkf6gjah2i 2026-07-03 22:19:59+00:00| seen|...

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access,...

CVE-2026-53203

creationtimestamp| type| source ---|---|--- 2026-07-03 17:22:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2ppftyb2k...

CVE-2026-38969

creationtimestamp| type| source ---|---|--- 2026-07-03 17:19:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c...

CVE-2026-53222

creationtimestamp| type| source ---|---|--- 2026-07-03 15:55:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvtroutk2c...

CVE-2026-53223

creationtimestamp| type| source ---|---|--- 2026-07-03 15:53:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvptxwrp2y 2026-07-06 06:51:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-59101

creationtimestamp| type| source ---|---|--- 2026-07-03 15:10:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdkwzky2i...

CVE-2026-59234 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion

Authorization Bypass Through User-Controlled Key CWE-639 in CalendarDeleteEventController app/Http/Controllers/Calendar/CalendarDeleteEventController.php, exposed at GET /calendar/event/delete/id, in Prospero Flow CRM before 5.5.3 allows a remote, authenticated attacker to delete arbitrary calend...

CVE-2026-9230

creationtimestamp| type| source ---|---|--- 2026-07-03 09:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbuoa3v62i 2026-07-03 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprhrglbwb2k 2026-07-03 22:35:41+00:00| seen|...

CVE-2026-12168

creationtimestamp| type| source ---|---|--- 2026-07-03 09:36:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaowulub2o 2026-07-25 15:00:05+00:00| seen| https://t.me/ZerodayAlert/749 2026-07-26 00:00:38+00:00| seen| https://t.me/ZerodayAlert/749...

CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-9080 UAF after pause in socket callback

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-47897

creationtimestamp| type| source ---|---|--- 2026-07-03 01:22:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mppf2vbry22c 2026-07-03 10:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqekix6hr2a 2026-07-03 22:36:05+00:00| seen|...

CVE-2026-57671

creationtimestamp| type| source ---|---|--- 2026-07-03 00:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcg77jh522...

CVE-2026-58578

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service ReDoS vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craf...