CVE-2026-57583: Improper Control of Generation of Code

OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzeppelin/wizard-cairo 3.0.1, @openzeppelin/wizard-stellar 0.6.2, and @openzeppelin/wizard-stylus 0.3.1, the setInfo code...

ROS-20260914-73-0070

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260914-73-0099

The vulnerability of Google Chrome is related to a data source confirmation error. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created HTML page...

An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems

The use of open-source software OSS in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While this accelerates development, it also introduces software-security risks into systems where patching is costly and...

ROS-20260914-73-0034

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0032

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260914-73-0010

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

PT-2026-91282

OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzeppelin/wizard-cairo 3.0.1, @openzeppelin/wizard-stellar 0.6.2, and @openzeppelin/wizard-stylus 0.3.1, the setInfo code...

ROS-20260914-73-0071

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

Checkov Code Analysis Code Execution

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

espectre snapshot

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

CVE-2026-80912

creationtimestamp| type| source ---|---|--- 2026-09-13 20:50:07+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvghv7ytma2e 2026-09-13 20:50:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117265701617196467...

CVE-2026-89723

creationtimestamp| type| source ---|---|--- 2026-09-13 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgf4qveo624 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89748

creationtimestamp| type| source ---|---|--- 2026-09-13 16:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfxrdikcg22...

CVE-2026-78491

creationtimestamp| type| source ---|---|--- 2026-09-13 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfwfkcnbd2f...

CVE-2026-89479

creationtimestamp| type| source ---|---|--- 2026-09-13 13:20:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfoqm2ewt24 2026-09-19 04:30:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117295821790643814 2026-09-19 04:30:04+00:00| seen|...

CVE-2026-81002

creationtimestamp| type| source ---|---|--- 2026-09-13 13:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfo6nc4ig2n 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90779

creationtimestamp| type| source ---|---|--- 2026-09-13 13:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfnppg5dg24 2026-09-20 09:34:34+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvwvfozapp24 2026-09-20 12:10:33+00:00| seen|...

CVE-2026-90777

creationtimestamp| type| source ---|---|--- 2026-09-13 13:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfno3rry22b 2026-09-14 05:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhdbg2xk22r 2026-09-16 07:27:26+00:00| seen|...

CVE-2026-90772

creationtimestamp| type| source ---|---|--- 2026-09-13 11:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ey6j7kk7xxcr5 2026-09-13 12:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkgugkaq2s 2026-09-13 12:03:08+00:00| seen|...