CVE-2026-32444

creationtimestamp| type| source ---|---|--- 2026-08-18 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekysxdfw25 2026-08-18 16:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelz3yfma25...

CVE-2026-50252

A flaw in Unbound's SOREUSEPORT implementation reduces UDP source port entropy by allowing attackers to map ports to specific worker threads. This enables DNS cache poisoning, potentially leading to traffic redirection or unauthorized information disclosure. Mitigation Disable the so-reuseport...

CVE-2026-50187

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

CVE-2026-50187 Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

MINI-5J7M-R2F9-3RWV

Bulletin has no description...

CVE-2026-67919

creationtimestamp| type| source ---|---|--- 2026-08-18 13:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtebistfd32e 2026-08-20 03:00:04+00:00| published-proof-of-concept| Telegram/OEj0lkcuhy0tneu4LVEJjjSEMhrw6Me4lFPRcwL7UUOA 2026-08-20 03:00:04+00:00|...

CVE-2026-45532

DataEase versions prior to 2.10.23 on Windows have a path traversal flaw: the server only filters /, allowing attackers to traverse directories via \. The fix is in v2.10.23; no workarounds exist. CVSS 4.0 scores 8.7 (HIGH) with network access and no authentication required. No exploitation detai...

GHSA-VV82-QVPF-RJWV

creationtimestamp| type| source ---|---|--- 2026-08-18 12:39:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mteae5u7gz26...

CVE-2026-75837

creationtimestamp| type| source ---|---|--- 2026-08-18 12:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte6petjve2t 2026-08-18 14:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefck2d542b 2026-09-17 22:32:09+00:00| seen|...

nightingale v9.1.1

Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...

Exploit for CVE-2024-40275

CVE-2024-40725 Scanner A Python-based detection tool for CV...

MINI-P39R-G93P-3PFF

Bulletin has no description...

CVE-2026-75479

creationtimestamp| type| source ---|---|--- 2026-08-18 01:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtczctrj442b...

SUSE CVE-2026-53797

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with ...

SUSE CVE-2026-53800

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...

CVE-2026-57580: Interpretation Conflict

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound SAML Source configured with the non-default USERNAMELINK or EMAILLINK user-matching mode interprets an XML comment in a NameID differently from the identity provider's signed assertion. An attacker with an...

PT-2026-80448

Openshift Migration Advisor agent-API fails to validate JWT source id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...

Packet Sender 8.11.1

Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline branch officially supports Windows, Mac, and Desktop Linux with Qt. Other places may recompile and redistribute Packet...

CVE-2026-55106: Missing Authorization

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...

acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15) +687 more potentially affected by CVE-2026-71491 via sqlparse (>=0.1.14, <=0.5.5)

sqlparse PYPI version =0.1.14, =0.1.7, =0.14.0.3rc1, =2.0.0, =0.2.0, =0.0.1, =1.0.6, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-71491 Source advisory: SNYK:PYTHON-SQLPARSE-18905009...