75331 matches found
EUVD-2026-52759
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
Technical details (affected products, affected component, root cause, exact impact, or remedies) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-52102
creationtimestamp| type| source ---|---|--- 2026-08-04 14:00:05+00:00| seen| https://t.me/GithubRedTeam/96595 2026-08-04 17:00:04+00:00| published-proof-of-concept| Telegram/LqdU20CE0Hk-SLFPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4 2026-08-05 00:00:26+00:00| published-proof-of-concept|...
CVE-2026-62927
creationtimestamp| type| source ---|---|--- 2026-08-04 13:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg 2026-08-06 12:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f 2026-10-15 05:00:00+00:00| seen|...
CVE-2022-25481
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:22+00:00| seen| https://t.me/cyberoknews/136 2026-08-05 00:00:37+00:00| seen| https://t.me/cyberoknews/136 2026-08-06 00:00:48+00:00| exploited| https://t.me/cyberoknews/136...
CVE-2024-33111
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:17+00:00| seen| https://t.me/pentestnotes/50 2026-08-05 00:00:32+00:00| seen| https://t.me/pentestnotes/50 2026-08-06 00:01:01+00:00| published-proof-of-concept| https://t.me/pentestnotes/50...
CVE-2024-5866
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/133 2026-08-05 00:00:30+00:00| seen| https://t.me/purpleshift/133...
CVE-2024-5865
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/133 2026-08-05 00:00:30+00:00| seen| https://t.me/purpleshift/133...
CVE-2025-6037
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/124 2026-08-05 00:00:30+00:00| published-proof-of-concept| https://t.me/purpleshift/124 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen|...
Malicious Package
Overview psbt-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PYSEC-2026-3622 yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
Summary If the --write-link, --write-url-link or --write-desktop-link options are used with yt-dlp, it may produce output that can lead to downstream remote code execution. An attacker can craft a malicious metadata payload to achieve arbitrary command injection in the .url and .desktop shortcut...
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
SummaryIf the --write-link, --write-url-link or --write-desktop-link options are used with yt-dlp, it may produce output that can lead to downstream remote code execution. An attacker can craft a malicious metadata payload to achieve arbitrary command injection in the .url and .desktop shortcut...
GHSA-22JQ-VG5J-6VGG
creationtimestamp| type| source ---|---|--- 2026-08-04 10:32:20+00:00| seen| https://gist.github.com/alon710/539d26ece962aef59230f2218cc50bae...
CVE-2026-14838
creationtimestamp| type| source ---|---|--- 2026-08-04 10:30:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/az4tszccexmgc...
Security Bulletin:IP-Address Library Vulnerability: XSS Risk with Untrusted Input Rendering and HTML Escaping Issues
Summary ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group and Address6.link do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage emitted by the...
Security Bulletin:lxml Local File Access Vulnerability: Fixed in 6.1.0
Summary lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration with resolveentities=True allows untrusted XML input to read local files. Setting the resolveentities option explicitly to...