CVE-2026-73256

creationtimestamp| type| source ---|---|--- 2026-08-20 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjvyie3f52c 2026-08-20 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlhlixg2r 2026-08-20 20:08:25+00:00| seen|...

VulApps

VulApps http://vulapps.evalbug.com/ Raccoglie vari ambienti di vulnerabilità e, per comodità d'uso, adotta uniformemente il formato Dockerfile. Raccoglie anche ambienti di strumenti di sicurezza. Se ti piace, metti una Star; se non intendi contribuire, non fare Fork. Indirizzo GitHub del progetto...

Cobra

Cobra Il design di questo progetto non è più in grado di soddisfare i requisiti attuali di scansione white-box, non è più mantenuto ed è utilizzabile solo a scopo di ricerca: non utilizzarlo in ambienti di produzione. Introduzione Cobra è uno strumento di audit di sicurezza del codice sorgente , ...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

CVE-2026-14671

creationtimestamp| type| source ---|---|--- 2026-08-20 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjvbcpnzu2x...

CVE-2026-75897

creationtimestamp| type| source ---|---|--- 2026-08-20 18:36:37+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvagabjp2z...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...

DEBIAN-CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

MAL-2026-14331 Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

Malicious code in @pablo_clueless/sniffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

CVE-2026-77176

creationtimestamp| type| source ---|---|--- 2026-08-20 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtap5dbe2z 2026-08-21 02:02:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtko5oxiwy2e...

offensive-one-liners

offensive-one-liners Un notebook con 110 one-liner di sicurezza offensiva per test autorizzati, CTF, bug bounty e ricerca di laboratorio. Organizzato in un unico notebook markdown con 12 sezioni. Vedi offensive-one-liners.md per il notebook completo. Argomenti trattati 1. Recon & Enumerazione 2...

EUVD-2026-63494

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

ROOT-APP-MAVEN-CVE-2026-2332 CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root

Root has patched CVE-2026-2332 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...

GHSA-89V8-RHWQ-HF77 asteval has a Sandbox Escape via BaseException Subclasses

Summary An attacker who can supply expressions to asteval.Interpreter.eval can raise SystemExit, KeyboardInterrupt, GeneratorExit, or BaseException from inside the sandbox. These exceptions are subclasses of BaseException but not Exception, so they bypass the except Exception: safety net in both...

CVE-2026-59307

creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...

CVE-2026-59324

creationtimestamp| type| source ---|---|--- 2026-08-20 17:17:06+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjqsa5lyf2b...

CVE-2026-76760

creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtjqgwi5nb2a 2026-08-20 17:11:16+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117128943795081747...

CVE-2026-77022

creationtimestamp| type| source ---|---|--- 2026-08-20 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjqfnq7sa23 2026-08-20 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtai2zz52t...