GHSA-7JXJ-RPX7-PH2C

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:33+00:00| seen| https://gist.github.com/alon710/be5bed867a7a74a3502ab74ecb972384 2026-01-24 22:17:04+00:00| seen| https://gist.github.com/alon710/59dbc024d388f24e75ae769d8151f5ce 2026-01-24 22:17:07+00:00| seen|...

GHSA-MXC8-4JQF-368Q

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:17+00:00| seen| https://gist.github.com/alon710/538f3bbaec01e73a79181c8d943a0a8b...

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs...

CVE-2026-0756

github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of github-kanban-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw...

K000159681: Credential harvesting campaign targeting F5 VPN users

On January 13, 2026, researchers identified a large-scale credential harvesting campaign targeting several VPN providers, including F5. The threat actors behind the campaign registered numerous doppelgänger domains designed to mimic legitimate F5 domains. These domains are used to deceive victims...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, gitsign, zarf, tekton-chains, flux-source-controller, spire-server, skaffold, neuvector-sigstore-interface, ratify, vexctl, teleport, buildkitd, policy-controller, trivy, tflint, zot, slsa-verifier, kyverno-notation-aws, aactl, trivy-operator, gh, k...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: falcoctl, cosign, gitsign, sigstore-scaffolding, zarf, tekton-chains, flux-source-controller, spire-server, skaffold, fulcio, neuvector-sigstore-interface, ratify, vexctl, podman, undock, skopeo, rekor, buildkitd, policy-controller, kubescape, docker-compose, trivy,...

GHSA-59F6-F4PC-WW92 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-GJ5H-7FQ5-56P5 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-84X2-RFRF-6F2C vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

CVE-2026-24137 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kots, slsa-verifier, vexctl, tflint, sigstore-scaffolding, spire-server-fips, teleport-operator-fips, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws, cg, docker-compose, skopeo, cosign-fips, ko, fulcio, podman-fips,...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kots, slsa-verifier, vexctl, tflint, sigstore-scaffolding, spire-server-fips, teleport-operator-fips, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws, cg, docker-compose, skopeo, cosign-fips, ko, fulcio, podman-fips,...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: falcoctl, trivy-operator, neuvector-sigstore-interface, crossplane-fips, slsa-verifier, chainctl, teleport, tkn-fips, vexctl, tflint, goreleaser, policy-controller-fips, spire-server-fips, tkn, tekton-chains, aactl, spire-server, witness,...

GitHub: PATs without the required scope can leak issues

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token PAT lacking the repo scope to retrieve issues and commits from private and internal repositories via the search REST API endpoints. The user...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow...

OESA-2026-1212 opencc security update

Opencc is for between Traditional Chinese and Simplified Chinese characters and phrases conversion library. Security Fixes: A vulnerability was found in BYVoid OpenCC up to 1.1.9 and classified as critical. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer...

OESA-2026-1213 opencc security update

Opencc is for between Traditional Chinese and Simplified Chinese characters and phrases conversion library. Security Fixes: A vulnerability was found in BYVoid OpenCC up to 1.1.9 and classified as critical. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer...

Exploit for CVE-2024-23700

Mirror https://github.com/canyie/CVE-2024-23700...

CVE-2020-16248

creationtimestamp| type| source ---|---|--- 2026-01-23 07:34:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-16248.yaml 2026-01-25 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdbmvmjmq52c...

CVE-2026-0927

creationtimestamp| type| source ---|---|--- 2026-01-23 07:23:16+00:00| seen| https://gist.github.com/Darkcrai86/30221df75e8d29c4c44a72efd5f3ce5b 2026-01-23 07:44:49+00:00| seen| https://gist.github.com/Darkcrai86/f6ceca6b6f5861138955c1b1e47ded28 2026-01-23 07:59:20+00:00| seen|...