121893 matches found
CVE-2026-63226
creationtimestamp| type| source ---|---|--- 2026-07-23 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN32082029...
Possible cache poisoning attack by mapping source port population per thread
...
akto v2.14.4
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
CVE-2026-15074
creationtimestamp| type| source ---|---|--- 2026-07-23 03:09:27+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbueoqlgs2t 2026-07-23 07:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrcem6yo6l2a 2026-07-23 08:44:54+00:00| seen|...
github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
CVE-2026-7120
creationtimestamp| type| source ---|---|--- 2026-07-23 02:54:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t...
CVE-2026-16632
creationtimestamp| type| source ---|---|--- 2026-07-23 01:52:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbq2wjqdp2d...
CVE-2026-16631
creationtimestamp| type| source ---|---|--- 2026-07-23 01:46:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbpqjfxpt24...
[SECURITY] Fedora 44 Update: chromium-150.0.7871.128-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
Malicious code in helix-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efca4dde44b08de6562799d28d41e0793e171dc72cf0380bf8f8f330d9236d2 No a static rule matches and no behavioral findings of concern were identified for [email protected]. No install-time lifecycle scripts fetching...
SUSE CVE-2026-49356
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...
CVE-2026-29988
creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:42+00:00| seen| https://www.jerrygamblin.com/2026/07/22/hydrate-hack-repeat-security-summer-camp-2026/ 2026-08-26 04:32:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiwavxcpifrbx...
opencti v7.260722.0
Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...
The vulnerability in the src/linker.c file of the jq JSON processing tool allows a attacker to cause a service failure.
The vulnerability in the src/linker.c file of the jq JSON processing tool lies in the lack of measures taken to eliminate the zero byte or NUL character. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-64047
Summary PostCSS's PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the local filesystem with no scheme, allowlist, or traversal check. An attacker who controls the CSS input can cause the host process to read any file...
PT-2026-64149
Name of the Vulnerable Software and Affected Versions PostCSS versions 8.5.11 and earlier Description PostCSS processes CSS files by transforming them into an Abstract Syntax Tree. The PreviousMap component parses / sourceMappingURL=PATH / comments from CSS strings passed to the process function...
ToolGuardian: Declarative Security for AI Agent-Tool Interactions
LLM agents increasingly rely on external tools, expanding capability while creating a new security boundary: third-party tools may appear benign at the interface level while embedding unsafe behavior in implementation. Existing defenses rely on weak metadata, collapse characterization and policy...
I2P 2.13.0
I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version...
CVE-2026-60369
creationtimestamp| type| source ---|---|--- 2026-07-22 23:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbiksnd2z2i 2026-07-23 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjsv4isa2e 2026-07-23 01:10:24+00:00| seen|...