CVE-2026-19410

creationtimestamp| type| source ---|---|--- 2026-08-31 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mueltayv7f2e 2026-08-31 10:07:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muenvpcwff2p 2026-09-26 03:56:28+00:00| seen|...

CVE-2026-82628

creationtimestamp| type| source ---|---|--- 2026-08-31 07:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muef4ppacs25 2026-08-31 08:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mueh76tlu72j...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities

Summary Multiple vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION:...

CVE-2026-82618

creationtimestamp| type| source ---|---|--- 2026-08-31 06:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2wv2vbiczzjdx...

CVE-2026-16848

creationtimestamp| type| source ---|---|--- 2026-08-31 05:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mue6sojb3e2x...

CVE-2026-82673

creationtimestamp| type| source ---|---|--- 2026-08-31 04:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2m3nheghtlrhy...

CVE-2026-82602

creationtimestamp| type| source ---|---|--- 2026-08-31 02:32:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iubkpjm5xtz2r...

CVE-2026-75458: Authorization Bypass Through User-Controlled Key

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

CVE-2026-75460: Authorization Bypass Through User-Controlled Key

XueZhiSi Open Source Exam System = 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester...

CVE-2026-82833: Improper Access Control

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82834: Improper Access Control

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82797: Uncontrolled Recursion

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51...

PT-2026-83792

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51...

Linux Distros Unpatched Vulnerability : CVE-2026-33245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential...

Canvas Component Data Compromise

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

Paint Component Data Compromise

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

Media Session DoS

The vulnerability of the Media Session component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...

MHTML Component Confidential Data Access

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

DataTransfer Component Confidential Data Access

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...