DEBIAN-CVE-2026-0821

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

CVE-2026-21900

creationtimestamp| type| source ---|---|--- 2026-01-10 01:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzv5s5ayv2y 2026-01-10 02:04:07+00:00| published-proof-of-concept| Telegram/rdcJ-eVVBzDoFwL5TR2qJvsWI6XIYotV57lHh9Pxh3U8ZQE 2026-01-17 20:59:02+00:00| seen|...

CVE-2024-41148

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python...

CVE-2025-69195

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted...

CVE-2025-67930

creationtimestamp| type| source ---|---|--- 2026-01-08 10:55:40+00:00| seen| https://gist.github.com/Darkcrai86/03b0e48d5b4d029a67830c68808d6451 2026-01-08 17:14:39+00:00| seen| Telegram/CDQqMS4pNTE8cr8AaaEWI1JiQM6inncWlOHwQ4JVBFkRKQI...

CVE-2026-21691

creationtimestamp| type| source ---|---|--- 2026-01-07 23:21:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbumasypyl2q...

EUVD-2026-1166

An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the fil...

CVE-2025-58441

creationtimestamp| type| source ---|---|--- 2026-01-07 18:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbu54u2fnq2g 2026-01-07 19:09:06+00:00| seen| Telegram/ClQlCkUKg-41DnO-lFV9vjntTb0h6MDzDnf9KQOdYwqtyI...

CVE-2025-15479

creationtimestamp| type| source ---|---|--- 2026-01-07 14:29:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtoikkrzi2q...

CVE-2025-47395

creationtimestamp| type| source ---|---|--- 2026-01-07 01:08:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbsbrrcq5u2q...

CVE-2025-14371

creationtimestamp| type| source ---|---|--- 2026-01-06 10:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqr7nr2bg2e...

CVE-2026-21749

creationtimestamp| type| source ---|---|--- 2026-01-06 07:18:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqfwvwuo52g...

CVE-2025-14438

creationtimestamp| type| source ---|---|--- 2026-01-06 06:01:28+00:00| seen| Telegram/C8cKa5CH9I3NM3jeEU5QbxYCnFxc-EFqHQ9i2kT9Led6pw 2026-01-06 07:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqg2ipejg2q...

EUVD-2025-206234

Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope...

Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

Impact Applications meeting these two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. 1. Use vega in an application that attaches both vega library and a vega.View instance similar to the Vega Editor to the global window, or has an...

DEBIAN-CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

UBUNTU-CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

CVE-2025-65110 Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

CVE-2025-15236

creationtimestamp| type| source ---|---|--- 2026-01-05 06:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10616-cd942-2.html 2026-01-05 09:00:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbo37hacti2o...

CVE-2025-71321

creationtimestamp| type| source ---|---|--- 2025-12-29 15:22:30+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m273-6v24-x4m4 2026-06-17 18:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivj6w4fe2j...