CVE-2026-75593

Prior to BuildKit 0.31.2, a client with control API access can craft an upload request causing files to escape the BuildKit state directory, enabling directory traversal. Fixed in v0.31.2. No exploitation details provided; CVSS 7.2 HIGH (network, low complexity, low privileges required).

CVE-2026-75626

SpiderFoot fails to HTML-escape correlation titles built from external scan data (server banners, metadata), allowing stored XSS: attackers inject malicious HTML/event handlers that execute scripts in operators' browsers when the correlations view is opened, potentially stealing API keys. No patc...

CVE-2024-58375: Exposure of Sensitive System Information to an Unauthorized Control Sphere

OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...

AZL-96581 CVE-2026-72402 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs printbpfinsn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPFPSEUDOMAPFD and BPFPSEUDOMAPVALUE...

SUSE CVE-2026-55987

OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens incomplete fix of 38009...

CVE-2026-19496

A flaw was found in sources-api-go. An authenticated remote user can exploit a SQL injection vulnerability by injecting arbitrary SQL expressions through query parameter filtering. This can lead to unauthorized information disclosure of internal database fields, arbitrary PostgreSQL function...

CVE-2026-68116

CVE-2026-68116 affects the Linux kernel VXLAN MDB replacement path. When replacing the source list of an MDB remote entry, the old sources are marked for deletion and the new list is added; if vxlan_mdb_remote_srcs_add() fails partway, the original rollback could delete pre-existing sources along...

CVE-2026-66915

creationtimestamp| type| source ---|---|--- 2026-08-10 10:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspvpwstsn2n 2026-08-10 10:53:53+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mspwps54m32i 2026-08-11 09:04:48+00:00| seen|...

CVE-2026-16985

creationtimestamp| type| source ---|---|--- 2026-08-10 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117070392510526892 2026-08-10 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n...

CVE-2026-19389

creationtimestamp| type| source ---|---|--- 2026-08-10 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117069331015574957 2026-08-10 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mspbca4pis24 2026-08-10 04:49:27+00:00| seen|...

CVE-2026-19381

creationtimestamp| type| source ---|---|--- 2026-08-10 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117068623277375334 2026-08-10 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msoxaf46yl2v 2026-08-10 02:00:02+00:00| seen|...

CVE-2026-65542

creationtimestamp| type| source ---|---|--- 2026-08-09 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msopq4olk62f 2026-08-09 23:16:10+00:00| seen| https://bsky.app/profile/potato.software/post/3msopq62hwg2i 2026-08-10 19:16:08+00:00| seen|...

CVE-2026-19348

creationtimestamp| type| source ---|---|--- 2026-08-09 12:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k 2026-08-09 12:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23 2026-08-09 16:00:46+00:00| seen|...

GHSA-HHV7-P4PG-WM6P

creationtimestamp| type| source ---|---|--- 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/865 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/925 2026-08-10 00:00:32+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/865 2026-08-10 00:00:33+00:00|...

CVE-2026-71992

creationtimestamp| type| source ---|---|--- 2026-08-09 03:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117063314524225568 2026-08-09 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msmlsamc5x24...

CVE-2026-71990

creationtimestamp| type| source ---|---|--- 2026-08-09 00:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcmg62vl2u 2026-08-09 01:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmf3rxura2a 2026-08-09 04:30:28+00:00| seen|...

CVE-2026-71952

creationtimestamp| type| source ---|---|--- 2026-08-08 17:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkzripjp27 2026-08-08 18:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jyuesx3qptyww 2026-08-09 05:01:17+00:00| seen|...

CVE-2026-16955

creationtimestamp| type| source ---|---|--- 2026-08-08 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117058713911525712 2026-08-08 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskkg4ykio2a 2026-08-08 08:50:01+00:00| seen|...

CVE-2022-4995

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msiwk42bgs2g 2026-08-07 16:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccn4u2pv2w3k3 2026-08-14 18:00:21+00:00| exploited|...

CVE-2026-62896

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheahnqgq2z 2026-08-07 01:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msheas63f42z 2026-08-08 08:07:07+00:00| seen|...