64695 matches found
WhatsApp account takeover scam asks you to “vote for my friend”
A scam is spreading through WhatsApp with the goal of taking over victims' accounts entirely. It starts with a message that feels harmless and familiar. Someone—often a contact whose account has already been compromised—asks you to support a friend or relative of theirs by voting in an online...
CVE-2026-67610
creationtimestamp| type| source ---|---|--- 2026-08-04 06:08:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadx5y3ju2i...
CVE-2026-41452
creationtimestamp| type| source ---|---|--- 2026-08-04 06:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i...
GHSA-MQ44-7P77-Q5H7
creationtimestamp| type| source ---|---|--- 2026-08-04 04:31:10+00:00| seen| https://gist.github.com/alon710/8b85a9db45c3273615bc588dcd240ceb...
CVE-2026-17614
creationtimestamp| type| source ---|---|--- 2026-08-04 04:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bysgnrne72avf...
CVE-2026-69096
creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...
CVE-2026-69243
creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3 2026-08-04 21:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96645 2026-08-05 00:00:21+00:00| published-proof-of-concept|...
CVE-2026-21011
creationtimestamp| type| source ---|---|--- 2026-08-04 03:00:04+00:00| seen| https://t.me/GithubRedTeam/96519 2026-08-05 00:00:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96519...
CVE-2026-69247
creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...
Important: acl
Issue Overview: A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or wri...
CVE-2026-48326
creationtimestamp| type| source ---|---|--- 2026-08-03 22:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwbt4qi2o 2026-08-04 00:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pg6e2tw2p 2026-08-04 17:10:53+00:00| seen|...
CVE-2026-18682
creationtimestamp| type| source ---|---|--- 2026-08-03 22:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dy7cso26k7dk6...
CVE-2026-48115
creationtimestamp| type| source ---|---|--- 2026-08-03 22:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/frvfab6kfztaf...
CVE-2026-66065
creationtimestamp| type| source ---|---|--- 2026-08-03 22:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva...
GHSA-CQ5V-8Q36-5273
creationtimestamp| type| source ---|---|--- 2026-08-03 21:32:44+00:00| seen| https://gist.github.com/alon710/cb22e8e296a36049522556dbfd0c36bc...
CVE-2026-9390
creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fde7bch2o 2026-08-06 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfsahehei2n...
CVE-2026-41447 FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path
FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\Program Files x86\Common Files\SSL\ directory path. Attackers can write a malicious OpenSSL configuration...
CVE-2026-38708
creationtimestamp| type| source ---|---|--- 2026-08-03 20:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7eykq3op2s...
EUVD-2026-52439
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...