RHSA-2026:0914

creationtimestamp| type| source ---|---|--- 2026-01-21 10:50:21+00:00| seen| https://gist.github.com/Darkcrai86/57edac8a3e782a0c4679ce47e4982376...

RHSA-2026:0752

creationtimestamp| type| source ---|---|--- 2026-01-19 17:11:18+00:00| seen| https://gist.github.com/Darkcrai86/413814d3d3fea677fd7cdbc1b7373db4...

RHSA-2026:0804

creationtimestamp| type| source ---|---|--- 2026-01-19 17:05:31+00:00| seen| https://gist.github.com/Darkcrai86/1dc570efdc170c19b28669d32ff4182e...

curl: Cookie Replacement Use-After-Free Vulnerability

Summary: The cookie replacement logic in lib/cookie.c contains a use-after-free vulnerability in the replaceexisting function. The function modifies a linked list while iterating over it, creating potential for memory corruption in concurrent or complex cookie operations. Vulnerable Code Location...

CVE-2026-1141

creationtimestamp| type| source ---|---|--- 2026-01-19 07:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr5fp7hk22r...

China-Linked APT Exploited Sitecore Zero-Day in Critical Infrastructure Intrusion

A threat actor likely aligned with China has been observed targeting critical infrastructure sectors in North America since at least last year. Cisco Talos, which is tracking the activity under the name UAT-8837 , assessed it to be a China-nexus advanced persistent threat APT actor with medium...

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month after the company disclosed that it had been exploited as a zero-day by a China-nexus advanced...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004094 advisory. In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004397 advisory. In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in t...

CVE-2026-23575

creationtimestamp| type| source ---|---|--- 2026-01-15 07:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mch3xlb37g2c...

New China Linked VoidLink Linux Malware Targets Major Cloud Providers

Researchers have discovered VoidLink, a sophisticated new Linux malware framework designed to infiltrate AWS, Google Cloud, and Azure. Learn how this Chinese-affiliated toolkit uses adaptive stealth to stay hidden...

CVE-2025-14880

creationtimestamp| type| source ---|---|--- 2026-01-14 07:33:51+00:00| seen| https://gist.github.com/Darkcrai86/3cf87130e39d81eecc29c38770fa8308 2026-01-14 08:06:58+00:00| seen| https://gist.github.com/Darkcrai86/b699c34f24359e7696cb78359669ab59...

CVE-2025-12050

creationtimestamp| type| source ---|---|--- 2026-01-14 01:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwplobtz2y 2026-01-14 05:38:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcee4elved2u 2026-01-14 05:38:59+00:00| seen|...

curl: Use-After-Free in curl_easy_nextheader when reusing header handle across requests

. The API returns struct curlheader objects that internally reference libcurl-owned linked list nodes. When a new request is performed on the same CURL handle, libcurl frees and rebuilds the internal header list, but previously returned struct curlheader objects remain valid to the application an...

CVE-2026-0513

creationtimestamp| type| source ---|---|--- 2026-01-13 06:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbwmodeci2x 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:58:20+00:00| seen|...

CVE-2026-22784

creationtimestamp| type| source ---|---|--- 2026-01-12 21:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcazkhbxyh2o...

CVE-2023-49820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc allows Stored XSS.This issue affects Structured Content JSON-LD wpsc: from n/a through 1.5.3...

CVE-2024-34029

Mattermost versions 9.5.x = 9.5.3, 9.7.x = 9.7.1 and 8.1.x = 8.1.12 fail to perform a proper authorization check in the /api/v4/groups//channels//link endpoint which allows a user to learn the members of an AD/LDAP group that is linked to a team by adding the group to a channel, even if the user...

CVE-2025-15057

creationtimestamp| type| source ---|---|--- 2026-01-09 08:03:00+00:00| seen| Telegram/baYAHbqMqSalDW7Jh5vLcnZYQr2csVL8CwQNknT-bM3nPo8 2026-01-09 08:41:55+00:00| seen| https://gist.github.com/Darkcrai86/3514d22fb35676a07c991248d6731f3a...

China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe. The activity cluster, which has been active since at least 2022, primarily focuses on extensive technical reconnaissance of target organizations...