CVE-2026-19475

Grafana is vulnerable to a denial of service via a bypass of the fix for CVE-2026-33375 . An authenticated user with permission to query a SQL data source can inject the timeGroup macro through a WHERE clause , which Grafana's regex-based macro parsing does not reject. Evaluating the injected mac...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78410

util-linux is affected by a flaw in how restricted bind mounts are handled. The source path taken from /etc/fstab is not pinned before the privileged mount(8) call, allowing a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount to bind a...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

EUVD-2026-70058

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-81294

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4arpeqd2m 2026-09-02 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeu2ptn2t 2026-09-22 07:00:08+00:00| seen|...

GHSA-J8PM-GJ4C-RQ4X

creationtimestamp| type| source ---|---|--- 2026-09-02 12:33:24+00:00| seen| https://gist.github.com/alon710/d11eade9d3460fb762a1734567ffc610...

CVE-2026-14199

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

CVE-2023-54354

creationtimestamp| type| source ---|---|--- 2026-09-02 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujvjw5r4t2b...

CVE-2026-79770

creationtimestamp| type| source ---|---|--- 2026-09-02 11:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujs6ls7yz2r...

CVE-2026-14828

creationtimestamp| type| source ---|---|--- 2026-09-02 11:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujrtja3uj2y 2026-09-02 11:10:23+00:00| seen| https://bsky.app/profile/potato.software/post/3mujsehavzj2v...

CVE-2026-84361

A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...

CVE-2026-5199

creationtimestamp| type| source ---|---|--- 2026-09-02 06:00:17+00:00| seen| https://t.me/RussianOSINT/7197 2026-09-03 00:00:44+00:00| seen| https://t.me/RussianOSINT/7197...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

Exploit for CVE-2026-84361

CVE-2026-84361: Composer’s P4PORT command execution PoC Engl...

CVE-2020-0155

creationtimestamp| type| source ---|---|--- 2026-09-02 05:00:04+00:00| seen| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0 2026-09-03 00:00:44+00:00| published-proof-of-concept| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0...