GHSA-MM85-Q63V-4476

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...

CVE-2026-54569

creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:06+00:00| published-proof-of-concept| https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j 2026-08-26 18:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t 2026-08-26...

CVE-2026-79044

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit missing authorization by using a specially crafted HTML page. This could allow the attacker to obtain sensitive information...

CVE-2026-79133

A flaw was found in chromium-browser. A remote attacker could exploit an incorrect authorization vulnerability in the Forms component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-54614

DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewController.php accepts a route-controlled previewName value in findPreview and passes the resolved class from App::className to constructor...

CVE-2026-80426

FiftyOne (Voxel51) is vulnerable to stored cross-site scripting in versions before 1.21.0 . The sidebar field-information component at FieldLabelAndInfo/index.tsx passes a dataset field's description to React's dangerouslySetInnerHTML without escaping or sanitizing, making it the only raw render ...

UBUNTU-CVE-2026-80543

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...

Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS

Summary Affected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...

CVE-2026-18252

creationtimestamp| type| source ---|---|--- 2026-08-26 12:30:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydkmt2jf26 2026-08-26 13:06:56+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtyfmgbzit26 2026-08-31 05:45:26+00:00| seen|...

CVE-2026-77532

creationtimestamp| type| source ---|---|--- 2026-08-26 12:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtycynsjl62c...

CVE-2026-74932

creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtybw3pt6m2u...

CVE-2026-77541

creationtimestamp| type| source ---|---|--- 2026-08-26 10:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty5xqnbpt2f...

CVE-2026-80236

creationtimestamp| type| source ---|---|--- 2026-08-26 08:45:05+00:00| seen| https://www.twcert.org.tw/en/cp-139-11134-01fc0-2.html...

CVE-2026-80235

creationtimestamp| type| source ---|---|--- 2026-08-26 08:43:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7rgvoyalntiiy 2026-08-26 08:45:03+00:00| seen| https://www.twcert.org.tw/en/cp-139-11134-01fc0-2.html 2026-08-26 09:40:04+00:00| seen|...

CVE-2026-6178

creationtimestamp| type| source ---|---|--- 2026-08-26 08:27:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5vyuqmr6g4qyi...

CVE-2026-78146

The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...

CVE-2025-53887

creationtimestamp| type| source ---|---|--- 2026-08-26 06:00:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-53887.yaml 2026-08-27 00:00:08+00:00| confirmed|...

CVE-2026-73335

creationtimestamp| type| source ---|---|--- 2026-08-26 05:20:04+00:00| seen| https://jvn.jp/en/jp/JVN67155805...

CVE-2026-79287

creationtimestamp| type| source ---|---|--- 2026-08-26 05:19:48+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 05:15:04+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-79246

creationtimestamp| type| source ---|---|--- 2026-08-26 05:18:25+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 05:17:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...