CVE-2017-6462

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2006-2451

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-09 05:00:06+00:00| seen|...

CVE-2004-0077

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo...

Veto v2.3

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

CVE-2025-52652

HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...

CVE-2026-84186

creationtimestamp| type| source ---|---|--- 2026-09-07 09:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ihtrds6blnc3w...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-53800

A Time-of-Check Time-of-Use TOCTOU race condition in rsync's --remove-source-files option allows a local attacker to delete arbitrary files. By replacing a source file with a symlink immediately after transfer but before deletion, the attacker can force rsync to delete the symlink target, resulti...

BIT-COMPOSER-2026-84361 Composer: Perforce source URL permits P4PORT `rsh:` command execution

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86313

CVE-2026-86313 is an out-of-bounds write vulnerability in Samsung Opensource Walrus , affecting commit af80e665ea49d9003695a66502f841ed1d8397e7. The flaw allows buffer overflow, rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, no required privileges, and user interaction req...

CVE-2026-78408

creationtimestamp| type| source ---|---|--- 2026-09-07 02:01:20+00:00| seen| https://bsky.app/profile/slackers.it/post/3muvfz7thww2s 2026-09-22 00:01:30+00:00| seen| https://bsky.app/profile/slackers.it/post/3mw2wcsqkue2h...

CVE-2026-86238

creationtimestamp| type| source ---|---|--- 2026-09-07 01:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c3nfrfbmymhgh...

CVE-2026-86240 liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...

EUVD-2026-72189

A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...

CVE-2026-86240 liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is aware of CVE-2026-75650 being exploited in the wild...

PT-2026-86875

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

ROS-20260907-73-0093

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-86592

Name of the Vulnerable Software and Affected Versions liufee FeehiCMS versions prior to 2.1.2 Description A server-side request forgery exists in the UEditor component within the catchImage function of the backend/widgets/ueditor/Uploader.php file. A remote attacker can exploit this by manipulati...