CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

EUVD-2026-72519

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86430

creationtimestamp| type| source ---|---|--- 2026-09-07 15:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/adymq3lw4sihz 2026-09-12 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdtdqrfdp24...

CVE-2026-53797

A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root,...

CVE-2026-86426

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwombeul522 2026-09-08 18:08:31+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzmjo32o42g 2026-09-09 15:00:07+00:00| confirmed|...

CVE-2026-76578

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f 2026-09-07 16:24:54+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o 2026-09-07 16:35:04+00:00| seen|...

CVE-2026-86429

creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwogkzu462e 2026-09-12 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdro5dz722r...

GHSA-QQJF-53CJ-PWVV

creationtimestamp| type| source ---|---|--- 2026-09-07 14:02:55+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3muwodkwr3p24 2026-09-10 23:20:16+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mv76uxdg5z2t...

CVE-2026-84964

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlooa74k2r...

CVE-2017-6462

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2017-6458

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2017-6451

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2004-0077

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo...

CVE-2006-2451

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-09 05:00:06+00:00| seen|...

Veto v2.3

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

CVE-2025-52652

HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...

CVE-2026-84186

creationtimestamp| type| source ---|---|--- 2026-09-07 09:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ihtrds6blnc3w...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-53800

A Time-of-Check Time-of-Use TOCTOU race condition in rsync's --remove-source-files option allows a local attacker to delete arbitrary files. By replacing a source file with a symlink immediately after transfer but before deletion, the attacker can force rsync to delete the symlink target, resulti...

BIT-COMPOSER-2026-84361 Composer: Perforce source URL permits P4PORT `rsh:` command execution

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...