CVE-2026-48341

creationtimestamp| type| source ---|---|--- 2026-07-27 03:50:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyjtzhh22f 2026-07-27 03:50:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyjvup3q2u...

CVE-2026-48344

creationtimestamp| type| source ---|---|--- 2026-07-27 03:43:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrly5iofeh23...

CVE-2026-49854

creationtimestamp| type| source ---|---|--- 2026-07-27 03:17:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwolwo4i2m...

Crow-Eye v0.12.6

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

PT-2026-65034

NGINX Plus and NGINX Open Source have a vulnerability in the ngx http proxy v2 module and ngx http grpc module modules. This vulnerability exists when the proxy http version to 2 or grpc pass directives are used to proxy HTTP/2 traffic, the ignore invalid headers directive is set to off, and the...

When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-Offs

Jailbreak defenses are essential for protecting large language models LLMs, but they can also introduce secondary costs that weaken model utility. We present a systematic study of these defense trade-offs along three dimensions: performance impact, over-refusal on benign inputs, and inference cos...

Wapiti Web Application Vulnerability Scanner 3.3.1

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

PT-2026-64907

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml ftype to ggml type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early...

CVE-2026-17527: Authorization Bypass Through User-Controlled Key

In containerized-data-importer CDI, the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authoriz...

PT-2026-65092

Name of the Vulnerable Software and Affected Versions Zephyr versions 3.3.0 through 4.4.1 Description The userspace verifier z vrfy log filter set for the log filter set syscall in subsys/logging/log mgmt.c uses a signed comparison for the src id parameter. A negative value provided to src id can...

globaleaks-whistleblowing-software v5.0.99

GlobaLeaks is free and open-source whistleblowing software enabling anyone to easily set up and...

Rocket.Chat v8.7.0-rc.2

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

Crow-Eye v0.12.5

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

CVE-2026-64530

creationtimestamp| type| source ---|---|--- 2026-07-26 17:42:00+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987508848390063 2026-07-27 06:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmba2jhs524 2026-08-03 10:15:38+00:00| seen|...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325 2026-07-27 11:00:52+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116991593814246930 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-64522

creationtimestamp| type| source ---|---|--- 2026-07-26 17:15:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987404024660419 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-15720

creationtimestamp| type| source ---|---|--- 2026-07-26 17:00:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkuaa2g722a 2026-07-26 17:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkual4n5s2j...

CVE-2026-15642

creationtimestamp| type| source ---|---|--- 2026-07-26 16:33:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrksopm3nq2o...

Malicious Package

Overview 30000-coin-master-free-spins-ryhfsse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...