EUVD-2026-36277

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a channel they can read. When tickets are closed, the bot exports the full ticket history and sends it ...

EUVD-2026-36276

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can enable logging and choose a logging channel they can read. The bot then logs deleted and edited message contents from every channel it can...

EUVD-2026-36299

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a reminder whose message contains @everyone or @here. When the reminder triggers, the bot sends the stored message back into the channel without suppressing...

CVE-2026-50628

creationtimestamp| type| source ---|---|--- 2026-06-11 18:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzt3n3bgh2t 2026-06-15 18:10:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o...

A tale of two eras

Welcome to this week's edition of the Threat Source newsletter. To the surprise of absolutely no one who has seen my face, I'm one of the younger employees at Talos. As my industry veteran colleagues were buying the first iPods, navigating the switch from dial-up to broadband, saying goodbye to...

CVE-2026-12028

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrduutc2y 2026-06-12 05:41:40+00:00|...

CVE-2026-12029

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrlmr5g2p 2026-06-12 05:25:16+00:00|...

CVE-2026-12031

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 04:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2u4ktdqu2y 2026-06-12 05:14:42+00:00|...

CVE-2026-12034

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2u4s2lj52p 2026-06-12 06:01:41+00:00|...

CVE-2026-50627

creationtimestamp| type| source ---|---|--- 2026-06-11 17:59:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzsjocwhy2t 2026-06-15 18:10:38+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22...

CVE-2026-50631

creationtimestamp| type| source ---|---|--- 2026-06-11 17:45:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrq2n2dz2f...

CVE-2026-50629

creationtimestamp| type| source ---|---|--- 2026-06-11 17:41:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrjdlhjm25...

CVE-2026-50630

creationtimestamp| type| source ---|---|--- 2026-06-11 17:38:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrdeb7n62w...

CVE-2026-53661

creationtimestamp| type| source ---|---|--- 2026-06-11 17:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzr2bnmce25...

CVE-2026-50623

creationtimestamp| type| source ---|---|--- 2026-06-11 17:20:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzqep6lp32e 2026-06-15 10:56:16+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mod4qikzm724...

CVE-2026-49875

creationtimestamp| type| source ---|---|--- 2026-06-11 17:15:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzq3qks772t 2026-06-15 16:40:32+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpy476mu2v...

CVE-2026-7787

creationtimestamp| type| source ---|---|--- 2026-06-11 17:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzpa7kxjz25...

CVE-2026-27022

creationtimestamp| type| source ---|---|--- 2026-06-11 16:10:14+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u...

CVE-2026-11816

creationtimestamp| type| source ---|---|--- 2026-06-11 15:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzijwsfgq25 2026-06-11 17:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzrmcbbgp25...

CVE-2026-7787

CVE-2026-7787 affects Langflow OSS versions 1.0.0–1.9.1. A session ID namespace bypass in the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows unauthenticated attackers to read or modify chat history by overriding the session_id used during flow execution when a PUBLIC flow includes a...