CVE-2018-18387

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| published-proof-of-concept| Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ 2026-09-06 00:01:04+00:00| published-proof-of-concept| Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ...

PT-2026-86399

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

PT-2026-86328

The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the image src attribute of the et pb video slider item shortcode in all versions up to, and including, 4.27.6. This is due to the image src field not being included in the $url options whitelist which only...

shannon v3.1.0

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33636 DESCRIPTION: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32280 DESCRIPTION: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44432 DESCRIPTION: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44490 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33997 DESCRIPTION: Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-42945 DESCRIPTION: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...

CVE-2026-53932

creationtimestamp| type| source ---|---|--- 2026-09-04 21:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupugdptng2z 2026-09-10 05:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bflenr32p 2026-09-10 05:00:07+00:00| seen|...

CVE-2026-44506

creationtimestamp| type| source ---|---|--- 2026-09-04 20:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117214622691306928 2026-09-04 20:20:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muprz6fxze2v...

zaproxy w2026-09-03

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

CVE-2026-31020

creationtimestamp| type| source ---|---|--- 2026-09-04 19:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muponykjjc25 2026-09-04 20:08:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muprdzukii2p 2026-09-05 07:02:19+00:00| seen|...

CVE-2026-82538

creationtimestamp| type| source ---|---|--- 2026-09-04 18:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ctckeofgcwqk6 2026-09-04 23:03:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35b6kko2r 2026-09-09 18:00:04+00:00| seen|...

CVE-2026-80912

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

CVE-2026-61608

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...

CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...