CVE-2017-4924

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:01+00:00| seen| https://t.me/KaitNews/5335 2026-07-27 00:01:42+00:00| seen| https://t.me/KaitNews/5335...

CVE-2017-7106

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:01+00:00| seen| https://t.me/KaitNews/5441 2026-07-27 00:01:42+00:00| seen| https://t.me/KaitNews/5441...

CVE-2017-12251

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:59+00:00| seen| https://t.me/KaitNews/5736 2026-07-27 00:01:41+00:00| seen| https://t.me/KaitNews/5736...

CVE-2016-5400

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:57+00:00| seen| https://t.me/KaitNews/6274 2026-07-27 00:01:38+00:00| seen| https://t.me/KaitNews/6274 2026-07-29 07:00:09+00:00| published-proof-of-concept| https://t.me/KaitNews/6274 2026-07-30 01:02:32+00:00|...

CVE-2017-2750

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6688 2026-07-27 00:01:38+00:00| seen| https://t.me/KaitNews/6688 2026-07-29 07:00:10+00:00| published-proof-of-concept| https://t.me/KaitNews/6688 2026-07-30 00:03:12+00:00|...

CVE-2017-0872

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/6958 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6958 2026-07-29 05:00:05+00:00| seen| https://t.me/KaitNews/6958 2026-07-30 00:03:15+00:00| seen| https://t.me/KaitNews/6958...

CVE-2020-15995

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:50+00:00| seen| https://t.me/KaitNews/8793 2026-07-27 00:01:33+00:00| seen| https://t.me/KaitNews/8793 2026-07-29 01:00:04+00:00| exploited| https://t.me/KaitNews/8793 2026-07-30 00:03:20+00:00| exploited| https://t.me/KaitNews/8793...

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2022-36320

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:46+00:00| seen| https://t.me/EchelonEyes/493 2026-07-27 00:01:20+00:00| seen| https://t.me/EchelonEyes/493 2026-07-28 11:00:06+00:00| seen| https://t.me/EchelonEyes/493 2026-07-29 00:00:38+00:00| seen| https://t.me/EchelonEyes/493...

CVE-2022-40136

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:40+00:00| seen| https://t.me/EchelonEyes/681 2026-07-27 00:01:16+00:00| seen| https://t.me/EchelonEyes/681 2026-07-28 08:00:05+00:00| seen| https://t.me/EchelonEyes/681 2026-07-29 00:00:43+00:00| seen| https://t.me/EchelonEyes/681...

CVE-2023-41101

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-28 00:00:32+00:00| exploited| https://t.me/EchelonEyes/2245...

GHSA-5PW9-F9R4-MV2R

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:09+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-27 00:00:47+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-28 00:00:40+00:00| seen| https://t.me/EchelonEyes/2791...

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to an improper prefix validation in the validateLocalUri method, where normalized paths are checked using strpos without enforcing directory boundaries, which allows an attacker who can control rendered HTML to escape the...

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths when processing SVG images embedded through data: URIs, where the second SVG processing pass performed by php-svg-lib does not enforce the same security restrictions, allowing an...

CVE-2026-64467

creationtimestamp| type| source ---|---|--- 2026-07-25 22:04:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116982876866945447 2026-07-26 11:37:35+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116986075905263463...

CVE-2026-64415

creationtimestamp| type| source ---|---|--- 2026-07-25 18:07:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrihhksabg2z 2026-07-25 18:07:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981944887444211...

Updated libnfs packages fix a security vulnerability

The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...

Updated vorbis-tools package fixes a security vulnerability

The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...

CVE-2026-64399

creationtimestamp| type| source ---|---|--- 2026-07-25 17:09:54+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981720297678493 2026-07-25 17:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mriebgo2ti2z 2026-07-27 06:20:07+00:00| seen|...