CVE-2026-62145

creationtimestamp| type| source ---|---|--- 2026-07-23 11:36:19+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116969083939726073 2026-07-23 12:00:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcs2aeery2b 2026-07-29 08:40:30+00:00| seen|...

CVE-2026-64611

creationtimestamp| type| source ---|---|--- 2026-07-23 11:28:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrcqaxjpvx2z 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3344 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/bdufstecru/3344...

CVE-2024-58330

creationtimestamp| type| source ---|---|--- 2026-07-23 11:23:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrcpxuab4o2v...

CVE-2026-63226

creationtimestamp| type| source ---|---|--- 2026-07-23 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN32082029...

Possible cache poisoning attack by mapping source port population per thread

...

akto v2.14.4

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

CVE-2026-15074

creationtimestamp| type| source ---|---|--- 2026-07-23 03:09:27+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbueoqlgs2t 2026-07-23 07:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrcem6yo6l2a 2026-07-23 08:44:54+00:00| seen|...

github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions

A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...

CVE-2026-7120

creationtimestamp| type| source ---|---|--- 2026-07-23 02:54:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t...

CVE-2026-16632

creationtimestamp| type| source ---|---|--- 2026-07-23 01:52:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbq2wjqdp2d...

CVE-2026-16631

creationtimestamp| type| source ---|---|--- 2026-07-23 01:46:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbpqjfxpt24...

[SECURITY] Fedora 44 Update: chromium-150.0.7871.128-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

Malicious code in helix-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efca4dde44b08de6562799d28d41e0793e171dc72cf0380bf8f8f330d9236d2 No a static rule matches and no behavioral findings of concern were identified for [email protected]. No install-time lifecycle scripts fetching...

SUSE CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-29988

creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:42+00:00| seen| https://www.jerrygamblin.com/2026/07/22/hydrate-hack-repeat-security-summer-camp-2026/ 2026-08-26 04:32:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiwavxcpifrbx...

opencti v7.260722.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

PT-2026-64047

Summary PostCSS's PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the local filesystem with no scheme, allowlist, or traversal check. An attacker who controls the CSS input can cause the host process to read any file...

PT-2026-64149

Name of the Vulnerable Software and Affected Versions PostCSS versions 8.5.11 and earlier Description PostCSS processes CSS files by transforming them into an Abstract Syntax Tree. The PreviousMap component parses / sourceMappingURL=PATH / comments from CSS strings passed to the process function...

ToolGuardian: Declarative Security for AI Agent-Tool Interactions

LLM agents increasingly rely on external tools, expanding capability while creating a new security boundary: third-party tools may appear benign at the interface level while embedding unsafe behavior in implementation. Existing defenses rely on weak metadata, collapse characterization and policy...

The vulnerability in the src/linker.c file of the jq JSON processing tool allows a attacker to cause a service failure.

The vulnerability in the src/linker.c file of the jq JSON processing tool lies in the lack of measures taken to eliminate the zero byte or NUL character. Exploiting this vulnerability could allow an attacker to cause a service failure...