MINI-5J7M-R2F9-3RWV

Bulletin has no description...

CVE-2026-67919

creationtimestamp| type| source ---|---|--- 2026-08-18 13:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtebistfd32e 2026-08-20 03:00:04+00:00| published-proof-of-concept| Telegram/OEj0lkcuhy0tneu4LVEJjjSEMhrw6Me4lFPRcwL7UUOA 2026-08-20 03:00:04+00:00|...

CVE-2026-45532

DataEase versions prior to 2.10.23 on Windows have a path traversal flaw: the server only filters /, allowing attackers to traverse directories via \. The fix is in v2.10.23; no workarounds exist. CVSS 4.0 scores 8.7 (HIGH) with network access and no authentication required. No exploitation detai...

GHSA-VV82-QVPF-RJWV

creationtimestamp| type| source ---|---|--- 2026-08-18 12:39:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mteae5u7gz26...

CVE-2026-75837

creationtimestamp| type| source ---|---|--- 2026-08-18 12:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte6petjve2t 2026-08-18 14:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefck2d542b 2026-09-17 22:32:09+00:00| seen|...

nightingale v9.1.1

Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...

Exploit for CVE-2024-40275

CVE-2024-40725 Scanner A Python-based detection tool for CV...

MINI-P39R-G93P-3PFF

Bulletin has no description...

CVE-2026-75479

creationtimestamp| type| source ---|---|--- 2026-08-18 01:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtczctrj442b...

SUSE CVE-2026-53797

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with ...

SUSE CVE-2026-53800

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...

Packet Sender 8.11.1

Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline branch officially supports Windows, Mac, and Desktop Linux with Qt. Other places may recompile and redistribute Packet...

CVE-2026-55106: Missing Authorization

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...

CVE-2026-57580: Interpretation Conflict

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound SAML Source configured with the non-default USERNAMELINK or EMAILLINK user-matching mode interprets an XML comment in a NameID differently from the identity provider's signed assertion. An attacker with an...

PT-2026-80448

Openshift Migration Advisor agent-API fails to validate JWT source id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...

ANT-2026-0BETG8WD · poppler · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-0BETG8WD: Heap-buffer-overflow in...

GHSA-X88Q-X2R7-VG3G vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-74253

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...

UBUNTU-CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15) +690 more potentially affected by CVE-2026-59893 via sqlparse (>=0.1.14, <=0.5.5)

sqlparse PYPI version =0.1.14, =0.1.7, =0.14.0.3rc1, =2.0.0, =0.2.0, =0.0.1, =1.0.6, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-59893 Source advisory: MEND:CVE-2026-59893...