CVE-2026-74662

creationtimestamp| type| source ---|---|--- 2026-08-25 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvanku5xz2y 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-74617

creationtimestamp| type| source ---|---|--- 2026-08-25 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtva3of3hg2c...

Malicious code in cscasereadserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336250fe38295375704495b6529ed6eb82f7006b6249c78ace08bc92d96d4bde [email protected] executes a preinstall script that auto-runs on npm install. The script collects the installer's OS username, hostname, an...

CVE-2026-74597

creationtimestamp| type| source ---|---|--- 2026-08-25 06:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv6xubjoc25...

CVE-2026-74587

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u4zxvj2f...

CVE-2026-74586

creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u3hm5a23 2026-09-09 16:00:06+00:00| seen| Telegram/idrq8GCshAndCL-cMA1Uoj2VzIrne5jNTdbo8AkO8RR-nM 2026-09-09 16:00:07+00:00| published-proof-of-concept|...

Duplicate Advisory: Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xjw5-q542-3vmr. This link is maintained to preserve external references. Original Description Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block acce...

Duplicate Advisory: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p597-crqc-m349. This link is maintained to preserve external references. Original Description Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowi...

CVE-2026-72702

creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsbu6id25 2026-08-25 04:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzzyhhc2c 2026-08-25 04:30:24+00:00| seen|...

CVE-2026-78682

creationtimestamp| type| source ---|---|--- 2026-08-25 02:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jncnsizlxkj4d 2026-09-01 13:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhk3wgcdl2f 2026-09-08 18:35:23+00:00| published-proof-of-concept|...

CVE-2026-78683

creationtimestamp| type| source ---|---|--- 2026-08-25 02:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqytwvum2e 2026-08-25 02:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6kw3zehwcdngz 2026-08-25 04:08:25+00:00| seen|...

CVE-2026-56710

creationtimestamp| type| source ---|---|--- 2026-08-25 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqgxw2sc2u 2026-08-25 04:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzjuvpw2p...

JetBrains TeamCity < 2021.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. CVE-2022-24332 - In JetBrains TeamCity before 2021.2, blind SSRF vi...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver exposes confidential or sensitive information in error messages from the command shell. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the do_secure_storage_access() function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the dosecurestorageaccess function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system is related to an exception handling error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the eiointc_update_sw_coremap() function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the eiointcupdateswcoremap function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch Linux kernel architecture is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the rxkad_decrypt_ticket() function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

The vulnerability of the read_key_from_user_keying() function in the kernel/crash_dump_dm_crypt.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the readkeyfromuserkeying function in the kernel module crashdumpdmcrypt.c of the Linux operating system is related to the inclusion of proprietary information in the debugging code. Exploiting this vulnerability could allow an attacker to cause a service failure...