CVE-2016-5400

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:57+00:00| seen| https://t.me/KaitNews/6274 2026-07-27 00:01:38+00:00| seen| https://t.me/KaitNews/6274 2026-07-29 07:00:09+00:00| published-proof-of-concept| https://t.me/KaitNews/6274 2026-07-30 01:02:32+00:00|...

CVE-2017-2750

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6688 2026-07-27 00:01:38+00:00| seen| https://t.me/KaitNews/6688 2026-07-29 07:00:10+00:00| published-proof-of-concept| https://t.me/KaitNews/6688 2026-07-30 00:03:12+00:00|...

CVE-2017-0872

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/6958 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6958 2026-07-29 05:00:05+00:00| seen| https://t.me/KaitNews/6958 2026-07-30 00:03:15+00:00| seen| https://t.me/KaitNews/6958...

CVE-2020-15995

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:50+00:00| seen| https://t.me/KaitNews/8793 2026-07-27 00:01:33+00:00| seen| https://t.me/KaitNews/8793 2026-07-29 01:00:04+00:00| exploited| https://t.me/KaitNews/8793 2026-07-30 00:03:20+00:00| exploited| https://t.me/KaitNews/8793...

CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2022-36320

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:46+00:00| seen| https://t.me/EchelonEyes/493 2026-07-27 00:01:20+00:00| seen| https://t.me/EchelonEyes/493 2026-07-28 11:00:06+00:00| seen| https://t.me/EchelonEyes/493 2026-07-29 00:00:38+00:00| seen| https://t.me/EchelonEyes/493...

CVE-2022-40136

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:40+00:00| seen| https://t.me/EchelonEyes/681 2026-07-27 00:01:16+00:00| seen| https://t.me/EchelonEyes/681 2026-07-28 08:00:05+00:00| seen| https://t.me/EchelonEyes/681 2026-07-29 00:00:43+00:00| seen| https://t.me/EchelonEyes/681...

CVE-2023-41101

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-28 00:00:32+00:00| exploited| https://t.me/EchelonEyes/2245...

GHSA-5PW9-F9R4-MV2R

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:09+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-27 00:00:47+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-28 00:00:40+00:00| seen| https://t.me/EchelonEyes/2791...

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to an improper prefix validation in the validateLocalUri method, where normalized paths are checked using strpos without enforcing directory boundaries, which allows an attacker who can control rendered HTML to escape the...

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths when processing SVG images embedded through data: URIs, where the second SVG processing pass performed by php-svg-lib does not enforce the same security restrictions, allowing an...

Fedora 44 : libgit2 / rust-libgit2-sys (2026-9d59721e9b)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d59721e9b advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

CVE-2026-64467

creationtimestamp| type| source ---|---|--- 2026-07-25 22:04:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116982876866945447 2026-07-26 11:37:35+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116986075905263463...

CVE-2026-64415

creationtimestamp| type| source ---|---|--- 2026-07-25 18:07:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrihhksabg2z 2026-07-25 18:07:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981944887444211...

Updated vorbis-tools package fixes a security vulnerability

The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...

Updated libnfs packages fix a security vulnerability

The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...

CVE-2026-64399

creationtimestamp| type| source ---|---|--- 2026-07-25 17:09:54+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981720297678493 2026-07-25 17:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mriebgo2ti2z 2026-07-27 06:20:07+00:00| seen|...

CVE-2019-6015

creationtimestamp| type| source ---|---|--- 2026-07-25 16:58:07+00:00| seen| https://gist.github.com/kuroma6666/70d2b192280084f50f932d4f0c0dbfc9...

CVE-2026-64433

creationtimestamp| type| source ---|---|--- 2026-07-25 16:55:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116981664371674372 2026-07-26 13:31:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116986525743985426...

HTTP Request Smuggling

io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to the WebSocket V07/V08 handshaker accepting a WebSocket upgrade request without requiring the Connection: Upgrade and Upgrade: websocket headers, which allows an attacker to force an unrecognized protoc...