CVE-2026-19587

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-19587: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

PT-2026-70977

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

CVE-2026-19588: Integer Overflow to Buffer Overflow

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

CVE-2026-19311: Undefined Behavior for Input to API

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

Neo4j Cypher MCP Server Code Execution

The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-8798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any...

Linux Distros Unpatched Vulnerability : CVE-2026-68116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for...

CVE-2026-66914

creationtimestamp| type| source ---|---|--- 2026-08-11 22:00:03+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/403 2026-08-12 00:00:07+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/403...

pingcastle v4.0.0.20

PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...

CVE-2026-59553

creationtimestamp| type| source ---|---|--- 2026-08-11 19:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mstdasl5uv22...

CVE-2026-70325

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:24+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:20+00:00| seen|...

CVE-2026-64920

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:59+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:54+00:00| seen|...

CVE-2025-31114

creationtimestamp| type| source ---|---|--- 2026-08-11 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst2jrpkgr2u 2026-08-14 04:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mszeav5rli2f...

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

CVE-2026-47702

creationtimestamp| type| source ---|---|--- 2026-08-11 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msszfxkjjc27...

SQL Injection

Overview civicrm/civicrm-core is an open source constituent relationship management for non-profits, NGOs and advocacy organizations. Affected versions of this package are vulnerable to SQL Injection via the contact search RLIKE clause. An attacker can access and extract the entire database by...

CVE-2026-72603

creationtimestamp| type| source ---|---|--- 2026-08-11 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msskv342ob26 2026-08-11 12:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3t4elk3mg6hdu...

CVE-2026-44401

creationtimestamp| type| source ---|---|--- 2026-08-11 12:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97555 2026-08-12 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97555 2026-08-12 08:00:04+00:00| published-proof-of-concept|...