CVE-2026-73370

creationtimestamp| type| source ---|---|--- 2026-09-14 21:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mviyvyv53c24...

CVE-2024-58383

creationtimestamp| type| source ---|---|--- 2026-09-14 19:58:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvivhexoih2e...

CVE-2026-78299

creationtimestamp| type| source ---|---|--- 2026-09-14 19:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mviugwhbwb2n...

CVE-2026-78330

creationtimestamp| type| source ---|---|--- 2026-09-14 19:30:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvituzizet2t 2026-09-15 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/117273174374332264 2026-09-15 04:30:33+00:00| seen|...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking online via Zoom at a League of Women Voters event on Tuesday, September 22, 2026 at 5 PM ET. I’m speaking at CanSecWest 2026 in Vancouver, Canada. The conference runs September 30–October 1, 2026; the time of my talk i...

CVE-2026-90946

creationtimestamp| type| source ---|---|--- 2026-09-14 19:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvisd6gaee2m...

CVE-2026-59178

creationtimestamp| type| source ---|---|--- 2026-09-14 18:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvirnn6qjc2j 2026-09-14 19:32:08+00:00| seen| https://gist.github.com/alon710/3693f8803a657bff4ffb362747901533 2026-09-14 20:00:44+00:00| seen|...

OESA-2026-3723 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privilege...

CVE-2026-59569

creationtimestamp| type| source ---|---|--- 2026-09-14 16:05:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6zfkww6wjfg5h 2026-09-21 12:10:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117308957574042512 2026-09-21 12:20:05+00:00| seen|...

CVE-2026-61797

creationtimestamp| type| source ---|---|--- 2026-09-14 15:09:41+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvifdge5ft2z 2026-09-14 21:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102329 2026-09-15 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-90786

creationtimestamp| type| source ---|---|--- 2026-09-14 14:36:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vqxxinlsgmbn...

CVE-2026-71801

creationtimestamp| type| source ---|---|--- 2026-09-14 14:22:41+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvicpf4it42q...

CVE-2026-86348

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

CVE-2026-15600 SQL Injection in Alior Bank raty PrestaShop module

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...

EUVD-2026-77518

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...

CVE-2026-7848

The Alior Bank "raty" PrestaShop module for commercial partners is vulnerable to SQL Injection in three hook methods (hookActionObjectProductUpdateBefore, hookActionObjectCategoryUpdateBefore, and hookActionObjectCategoryAddAfter). The module inserts the POST parameters alior_product_promotion, a...

CVE-2026-7848 SQL Injection in Alior Bank raty PrestaShop module

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...

CVE-2026-88024

creationtimestamp| type| source ---|---|--- 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-88023

creationtimestamp| type| source ---|---|--- 2026-09-14 14:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-86348 MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...