PT-2026-85281

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

angr 9.3.4

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

Linux Distros Unpatched Vulnerability : CVE-2026-19475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause,...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

GHSA-4Q39-2JHR-7QX8

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

CVE-2026-84888

creationtimestamp| type| source ---|---|--- 2026-09-02 23:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/57rzlvezgj6h4...

CVE-2026-26247

creationtimestamp| type| source ---|---|--- 2026-09-02 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mul35abwqo2l...

CVE-2026-12556

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

CVE-2026-53671

creationtimestamp| type| source ---|---|--- 2026-09-02 20:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukqfoyrwn2p 2026-09-02 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muksr3u7jm2v...

CVE-2026-84379

creationtimestamp| type| source ---|---|--- 2026-09-02 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/el37sn7tv53rt...

GO-2026-6327 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs...

GO-2026-6323 klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2026-79755

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbo7hk32h 2026-09-02 18:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5duznc7mbj25r...

CVE-2026-82404

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbhhcji2a 2026-09-02 19:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d72zrvwkyefas 2026-09-03 20:50:05+00:00| seen|...

CVE-2026-51744

creationtimestamp| type| source ---|---|--- 2026-09-02 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukip6i4ug2w...

GHSA-F65P-4M7J-42XC

creationtimestamp| type| source ---|---|--- 2026-09-02 17:33:14+00:00| seen| https://gist.github.com/alon710/4dc17918da62d2577fc435c04c7ff596 2026-09-03 19:52:00+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:16+00:00| seen|...

CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-77009

creationtimestamp| type| source ---|---|--- 2026-09-02 16:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukcybx7hl2o 2026-09-02 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkwpstlq2o...

CVE-2024-4254

creationtimestamp| type| source ---|---|--- 2026-09-02 16:00:04+00:00| seen| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM 2026-09-03 00:00:41+00:00| published-proof-of-concept| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM...

CVE-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...