CVE-2026-63385

creationtimestamp| type| source ---|---|--- 2026-08-20 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjzdqug2n2c 2026-08-20 20:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dpdykp2p 2026-08-22 06:10:03+00:00| seen|...

CVE-2026-66785

creationtimestamp| type| source ---|---|--- 2026-08-20 19:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjxo5keg325 2026-08-20 20:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fbjng72p 2026-08-20 21:00:45+00:00| seen|...

DEBIAN-CVE-2026-53585

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

DEBIAN-CVE-2026-15743

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

CVE-2026-53424

creationtimestamp| type| source ---|---|--- 2026-08-20 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjx4cg2wl2j 2026-08-20 20:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2d66bz72e...

CVE-2026-76641

creationtimestamp| type| source ---|---|--- 2026-08-20 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r...

net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

CVE-2026-73256

creationtimestamp| type| source ---|---|--- 2026-08-20 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjvyie3f52c 2026-08-20 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlhlixg2r 2026-08-20 20:08:25+00:00| seen|...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

CVE-2026-14671

creationtimestamp| type| source ---|---|--- 2026-08-20 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjvbcpnzu2x...

CVE-2026-75897

creationtimestamp| type| source ---|---|--- 2026-08-20 18:36:37+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvagabjp2z...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...

DEBIAN-CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

MAL-2026-14331 Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

Malicious code in @pablo_clueless/sniffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

yggdrasil security update

An update is available for yggdrasil. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list yggdrasil is a system daemon that subscribes to topics on an MQTT broker a...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

CVE-2026-77176

creationtimestamp| type| source ---|---|--- 2026-08-20 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtap5dbe2z 2026-08-21 02:02:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtko5oxiwy2e...

offensive-one-liners

offensive-one-liners Un notebook con 110 one-liner di sicurezza offensiva per test autorizzati, CTF, bug bounty e ricerca di laboratorio. Organizzato in un unico notebook markdown con 12 sezioni. Vedi offensive-one-liners.md per il notebook completo. Argomenti trattati 1. Recon & Enumerazione 2...