CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

CVE-2026-85046

creationtimestamp| type| source ---|---|--- 2026-09-03 21:47:45+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mungh3gwwk2c 2026-09-04 04:13:09+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3muo3xqmoksah 2026-09-04 04:46:03+00:00| seen|...

CVE-2026-8862 Vulnerabilities exists in IBM Netezza Software

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...

File Inclusion at postcss Dependency in Bamboo Data Center

This High severity File Inclusion vulnerability was introduced in versions 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated...

CVE-2026-83497

creationtimestamp| type| source ---|---|--- 2026-09-03 20:32:54+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3muncbakmfo25...

CVE-2026-85048

creationtimestamp| type| source ---|---|--- 2026-09-03 20:00:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208884349943959 2026-09-04 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

CVE-2026-85393

creationtimestamp| type| source ---|---|--- 2026-09-03 19:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/asgrlxcdrvwc5 2026-09-03 20:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munahurifc23 2026-09-05 05:20:02+00:00| seen|...

Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-49356)

Summary There are vulnerabilities in core-7.26.10.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-49356. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc...

CVE-2026-84238

creationtimestamp| type| source ---|---|--- 2026-09-03 18:07:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun25mnisg2o 2026-09-03 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun4jepumj2w...

EmailXpose — Updated!

EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...

SUSE CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2022-46032

creationtimestamp| type| source ---|---|--- 2026-09-03 14:43:22+00:00| seen| https://gist.github.com/1731249586/6656c4616664e3bf64e7083926dc0566...

CVE-2026-78080

creationtimestamp| type| source ---|---|--- 2026-09-03 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumjjf4tjf2y 2026-09-03 14:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummqctp742y...

GHSA-X898-729X-CC3R

creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a...

CVE-2026-41030

creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...

CVE-2026-85150

creationtimestamp| type| source ---|---|--- 2026-09-03 11:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h4gneqinjiu47...

composer: Composer: Arbitrary code execution via malicious Perforce source URL

A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...

CVE-2026-76175

creationtimestamp| type| source ---|---|--- 2026-09-03 10:56:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nqbvpo4r4i2g...

CVE-2026-76174

creationtimestamp| type| source ---|---|--- 2026-09-03 10:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j2xudr2x2zzga 2026-09-03 14:07:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummphzzjj2o 2026-09-03 14:20:03+00:00| seen|...