CVE-2016-9310

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2026-86435

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...

CVE-2026-86433

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...

CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

Flirty OnlyFans promoters on X may be using AI to appear human

In a recent post, we looked at reports of League of Legends players receiving suspicious friend requests shortly after matches. The accounts quickly steered the conversation toward Discord, where they promoted paid adult-content pages. At the time, one unanswered question was how much of those...

xalgorix v4.6.72

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

ROS-20260907-73-0504

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the POS platform component of Oracle Hospitality Simphony allows a malicious individual to gain unauthorized access to read, create, delete, and modify data, or to cause service interruptions.

The vulnerability of the Oracle Hospitality Simphony sales management platform component relates to insufficient access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify data, or cause service interruptions...

ROS-20260907-73-0045

The vulnerability in Erlang relates to the possibility of using hard-coded platform keys. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code before the operating system is loaded...

SUSE CVE-2026-84446

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::initsampletimingtable compute a logical mnumoutputsamples value that exceeds the uint32t counters used by TrackVisual::decodenextimagesample and...

SUSE CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...

ublockdnsclient v0.3.1

uBlockDNS Client uBlockDNS Client is an independent project and is not affiliated with, endorsed by, or related to uBlock Origin or its maintainer. uBlockDNS Client brings DNS-level ad and tracker blocking to your entire device. It uses community-maintained filter lists such as EasyList and...

AperiSolve v3.7.10

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

CVE-2026-19298

creationtimestamp| type| source ---|---|--- 2026-09-05 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musliwz7mp2k 2026-09-09 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv44w3p7pu2p...

GHSA-P498-V437-472G vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, langfuse...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, tileserver-gl-fips, langfuse, tileserver-gl, lambda-nodejs...

OESA-2026-3697 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: CVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEM...

OESA-2026-3698 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: CVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEM...

yakit v1.4.8-0905

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...