CVE-2026-66065

creationtimestamp| type| source ---|---|--- 2026-08-03 22:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva...

GHSA-CQ5V-8Q36-5273

creationtimestamp| type| source ---|---|--- 2026-08-03 21:32:44+00:00| seen| https://gist.github.com/alon710/cb22e8e296a36049522556dbfd0c36bc...

CVE-2026-9390

creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fde7bch2o 2026-08-06 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfsahehei2n...

CVE-2026-41447 FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path

FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\Program Files x86\Common Files\SSL\ directory path. Attackers can write a malicious OpenSSL configuration...

CVE-2026-38708

creationtimestamp| type| source ---|---|--- 2026-08-03 20:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7eykq3op2s...

EUVD-2026-52439

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...

CVE-2026-18616

creationtimestamp| type| source ---|---|--- 2026-08-03 20:42:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7eeoxtlk2l 2026-08-04 16:00:45+00:00| seen|...

CVE-2026-69192

creationtimestamp| type| source ---|---|--- 2026-08-03 20:31:35+00:00| seen| https://gist.github.com/alon710/572dbe4f17925376407c061da3100fba 2026-08-03 20:35:03+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr 2026-08-04...

CVE-2005-1686

creationtimestamp| type| source ---|---|--- 2026-08-03 19:39:32+00:00| seen| https://bsky.app/profile/lwflouisa.comics.town.ap.brid.gy/post/3ms7at6t5n232...

CVE-2026-15928

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

CVE-2026-18614

creationtimestamp| type| source ---|---|--- 2026-08-03 18:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms76bze77b2h 2026-08-03 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7bzldpxe2e 2026-08-03 20:44:32+00:00| seen|...

GHSA-FXQJ-RQCC-2CMP

creationtimestamp| type| source ---|---|--- 2026-08-03 18:31:17+00:00| seen| https://gist.github.com/alon710/cea21195fa5b2fd7a130b5ccd15ff053...

CVE-2026-40717

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67611

creationtimestamp| type| source ---|---|--- 2026-08-03 18:02:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h4e6aocoakogt...

CVE-2026-12965

creationtimestamp| type| source ---|---|--- 2026-08-03 17:54:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72wozp2t2o...

CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

CVE-2025-15631

CVE-2025-15631 describes a cryptographic weakness in TP-Link Omada devices where site credentials are protected with a legacy hashing algorithm that does not provide sufficient protection. The affected component is credential storage on Omada devices; the root cause is the use of an inadequate ha...

CVE-2025-15630 Device Provisioning Race Condition in TP-Link Omada Adoption Workflow

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow...

CVE-2025-15630

CVE-2025-15630 describes a race condition in the cloud-based TP-Link Omada adoption workflow. The vulnerability arises during device provisioning, where an attacker could interact with the adoption process before a legitimate device finishes registration, potentially causing provisioning informat...

CVE-2025-15629 Weak Session Key Generation in TP-Link Omada Adoption Protocol

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...