CVE-2026-45813

CVE-2026-45813 covers an out-of-bounds write and integer underflow in the Apache NimBLE BASS service. The issue arises from improper validation when parsing the BASS service “Add Source” and “Modify Source” PDUs, which can cause a stack buffer overflow or arbitrary out-of-bounds read. It is trigg...

CVE-2026-45813 Apache NimBLE: Incorrect data validation in BASS add/modify source operation

Out-of-bounds Write, Integer Underflow Wrap or Wraparound vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearb...

CVE-2026-7483

creationtimestamp| type| source ---|---|--- 2026-07-24 10:15:43+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrf4nvc42o2v 2026-07-24 13:25:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhaohidj2g 2026-07-25 08:08:14+00:00| seen|...

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...

PYSEC-2026-311

creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.3: rabbitmq-server4.3-4.3.4-0.1.hum1 aarch64, x8664 rabbitmq-server4.3-4.3.4-0.1.hum1.src src...

CVE-2026-12981

creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...

CVE-2026-14586

creationtimestamp| type| source ---|---|--- 2026-07-24 05:05:19+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mrelccuco2dg...

CVE-2019-5392

creationtimestamp| type| source ---|---|--- 2026-07-24 05:00:05+00:00| seen| Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN34 2026-07-25 00:00:11+00:00| published-proof-of-concept| Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN34...

CVE-2024-58354

creationtimestamp| type| source ---|---|--- 2026-07-24 03:33:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mreg5zx7qd2o...

MAL-2026-11041 Malicious code in @daylightqc/date-fmt-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...

CVE-2026-45820

creationtimestamp| type| source ---|---|--- 2026-07-24 02:48:49+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mredorzn2s2t 2026-08-04 04:47:06+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o...

SUSE CVE-2026-39879

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CVE-2026-1673

creationtimestamp| type| source ---|---|--- 2026-07-24 01:45:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrea5jo2pq24...

CVE-2026-16756

creationtimestamp| type| source ---|---|--- 2026-07-24 01:01:22+00:00| seen| https://bsky.app/profile/rindrics.com/post/3mre5olrots2j 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...

CVE-2026-58275

creationtimestamp| type| source ---|---|--- 2026-07-24 00:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3t3nspm23 2026-07-24 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972364326396269 2026-07-24 01:30:36+00:00| seen|...

CVE-2026-62825

creationtimestamp| type| source ---|---|--- 2026-07-24 00:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3pkjytc2z 2026-07-24 03:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972717625342012 2026-07-24 03:00:27+00:00| seen|...

CVE-2026-56191

creationtimestamp| type| source ---|---|--- 2026-07-24 00:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3pj76me23 2026-07-24 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mreee4ela22q 2026-07-24 04:30:27+00:00| seen|...

CVE-2026-54120

creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3igg2c62a 2026-07-24 13:08:20+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3mrfgcioxnn2j 2026-07-24 13:30:31+00:00| seen|...

CVE-2026-56165

creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3iezou62v 2026-07-24 05:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2wg5nh2f 2026-07-31 02:07:06+00:00| seen|...