CVE-2026-84567

creationtimestamp| type| source ---|---|--- 2026-09-14 22:42:31+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 04:50:49+00:00| seen|...

CVE-2026-76081

creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...

GHSA-V859-C572-QH5P

creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...

CVE-2026-90814

A Server-Side Request Forgery (SSRF) vulnerability exists in cosmicstack-labs mercury-agent up to version 1.1.13 . The flaw is in the githubRequest function within the GitHub API Handler component (file src/utils/github.ts), where manipulation of the path argument allows a remote, low-privilege a...

CVE-2026-90814 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...

CVE-2026-90814 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...

EUVD-2026-77775

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...

Malicious code in concierge-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b The package's declared postinstall script executes exfilv2.js at npm install time. That script harvests the full process environment, current working...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for Vim before version 8.2...

CVE-2023-50461

creationtimestamp| type| source ---|---|--- 2026-09-14 12:02:18+00:00| seen| https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b...

Astra Linux – Vulnerability in Vim

NULL pointer dereferencing in the GitHub repository for vim/vim before version 9.0.0240...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository vim/vim before version 8.2.4968...

Astra Linux – Vulnerability in Grunt

The file.copy operations in GruntJS are vulnerable to a TOCTOU race condition, which can lead to arbitrary file writes in the GitHub repository gruntjs/grunt before version 1.5.3. This vulnerability allows for arbitrary file writes that can lead to local privilege escalation to the GruntJS user...

CVE-2023-45858

creationtimestamp| type| source ---|---|--- 2026-09-14 08:01:23+00:00| seen| https://gist.github.com/ichintu/cae29b5a9ea4657b6dde0ca7d5249bb0...

CVE-2026-90814: Server-Side Request Forgery (SSRF)

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...

PT-2026-91444

Name of the Vulnerable Software and Affected Versions cosmicstack-labs mercury-agent versions prior to 1.1.14 Description A flaw in the GitHub API Handler component allows remote exploitation via server-side request forgery SSRF, a technique where an attacker induces the server to make requests t...

CVE-2026-37008

creationtimestamp| type| source ---|---|--- 2026-09-13 23:05:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvgphnxdtu2b 2026-09-14 00:03:14+00:00| seen| https://gist.github.com/ichintu/66ee5056fb951ebe1cfdbe3d6efa4dc0 2026-09-14 04:00:44+00:00| seen|...

GHSA-2883-XCG3-V3HH

creationtimestamp| type| source ---|---|--- 2026-09-13 23:02:40+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-14 00:01:28+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-15 12:45:46+00:00| seen|...

CVE-2026-90647

creationtimestamp| type| source ---|---|--- 2026-09-12 23:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w 2026-09-13 00:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117260788422772028 2026-09-13 00:00:42+00:00| seen|...

mcpsnoop v0.22.0

Wireshark for MCP. mcpsnoop sits between your AI client and your MCP server and records every JSON-RPC frame they exchange, with no change to either side. Watch it live in your terminal, fail CI on what it finds, or send it to your tracing backend as OpenTelemetry spans. The problem The official...