85083 matches found
CVE-2026-64198
creationtimestamp| type| source ---|---|--- 2026-09-03 22:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hlkfupm65armm 2026-09-03 23:02:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkmkg5am2h...
CVE-2026-82520
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...
CVE-2026-82521
parsedmarc versions 9.0.6 through before 11.0.1 are affected by a path traversal vulnerability in the forensic report sample file output. When an email subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string and falls back to the raw unsa...
CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Last week, there were 284 vulnerabilities disclosed in 198 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 136 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
CVE-2026-85109
creationtimestamp| type| source ---|---|--- 2026-09-03 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mummuqdzkc2o 2026-09-03 14:57:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g7i4jnhtyr6vz...
GHSA-X898-729X-CC3R
creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a...
GHSA-6F2Q-W3R8-XXHJ
creationtimestamp| type| source ---|---|--- 2026-09-03 01:51:43+00:00| seen| https://bsky.app/profile/lazarusholic.bsky.social/post/3muldmfy4222y...
PT-2026-85250
Name of the Vulnerable Software and Affected Versions parsedmarc versions 9.0.6 through 11.0.0 Description The software writes forensic report sample files using an output path derived from the email subject. If the subject consists entirely of path traversal sequences sequences used to access...
PT-2026-85293
Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A buffer over-read occurs in the isQuoted, isBraced, and isChevroned functions. These functions strip whitespace from input but continue to index using the original string length, allowing an...
CVE-2026-82521: Improper Limitation of a Pathname to a Restricted Directory
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
PT-2026-85298
Name of the Vulnerable Software and Affected Versions MOOS-IvP pMarineViewer versions prior to 24.8.2 Description An issue exists where the software fails to limit the number of tracked node identities received from NODE REPORT messages. An unauthenticated attacker can publish crafted NODE REPORT...
The Bug Report – August 2026 Edition
The Bug Report – August 2026 Edition By Jonathan Omakun · September 3, 2026 Why am I here? Sharpen your pencils and pull out those fresh notebooks; we're back with the bug report! Half the world is squeezing the last drops of joy out of their summer vacations, and the other half is on the...
CVE-2026-26247
creationtimestamp| type| source ---|---|--- 2026-09-02 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mul35abwqo2l...
CVE-2025-52940
creationtimestamp| type| source ---|---|--- 2026-09-02 23:00:05+00:00| seen| https://t.me/payloadUAV/168 2026-09-03 00:00:36+00:00| seen| https://t.me/payloadUAV/168...
CVE-2026-53670
creationtimestamp| type| source ---|---|--- 2026-09-02 20:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukqfgudka2o 2026-09-02 21:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muktcyhfkr2o...