CVE-2026-85429: Insufficient Verification of Data Authenticity

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

PT-2026-85278

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

CVE-2026-85084: Out-of-bounds Write

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers...

PT-2026-85281

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

Linux Distros Unpatched Vulnerability : CVE-2026-19475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause,...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

GHSA-4Q39-2JHR-7QX8

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

CVE-2026-84888

creationtimestamp| type| source ---|---|--- 2026-09-02 23:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/57rzlvezgj6h4...

CVE-2026-26247

creationtimestamp| type| source ---|---|--- 2026-09-02 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mul35abwqo2l...

CVE-2026-12556

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

Malicious code in awell-libs (npm)

Source: checkmarx f22989168c34b37227bb7bcfe0b03c27cd141f8ec26d34a78a0c0ba06553f881 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in availab-le-alb-um-zip-source-tags-codes-cd4tp-nojdxy (npm)

The package availab-le-alb-um-zip-source-tags-codes-cd4tp-nojdxy was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-53671

creationtimestamp| type| source ---|---|--- 2026-09-02 20:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukqfoyrwn2p 2026-09-02 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muksr3u7jm2v...

CVE-2026-84379

creationtimestamp| type| source ---|---|--- 2026-09-02 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/el37sn7tv53rt...

GO-2026-6323 klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

GO-2026-6327 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs...

CVE-2026-79755

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbo7hk32h 2026-09-02 18:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5duznc7mbj25r...

CVE-2026-82404

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbhhcji2a 2026-09-02 19:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d72zrvwkyefas 2026-09-03 20:50:05+00:00| seen|...

CVE-2026-51744

creationtimestamp| type| source ---|---|--- 2026-09-02 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukip6i4ug2w...

GHSA-F65P-4M7J-42XC

creationtimestamp| type| source ---|---|--- 2026-09-02 17:33:14+00:00| seen| https://gist.github.com/alon710/4dc17918da62d2577fc435c04c7ff596 2026-09-03 19:52:00+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:16+00:00| seen|...