AZL-75698 CVE-2025-68119 affecting package golang for versions less than 1.24.12-1

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...

CVE-2025-57792

creationtimestamp| type| source ---|---|--- 2026-01-28 19:48:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj24exqzj2x 2026-01-28 19:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdj2l6ujb72t...

CVE-2025-68119

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...

EUVD-2025-206446

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...

CVE-2025-68119 Unexpected code execution when invoking toolchain in cmd/go

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...

CVE-2025-68030

creationtimestamp| type| source ---|---|--- 2026-01-28 19:28:37+00:00| seen| Telegram/BteO5ttxmfdgIt4GAr6cRkWYwhZ7KE0e2fYBtMKgsN-sPs 2026-01-28 19:28:51+00:00| seen| Telegram/OoNBUBQQ6ycOaC7P7rGpkD618nTDPQeAS9RoVEBzcO4CDw...

CVE-2025-57793

creationtimestamp| type| source ---|---|--- 2026-01-28 19:21:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiyn7p42h26 2026-01-28 19:48:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj24mba3u23...

CVE-2025-33218

creationtimestamp| type| source ---|---|--- 2026-01-28 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdixijd25o2h 2026-01-28 19:33:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdizbwjjym2t...

Exploit for CVE-2024-12345

CVE Exchange Stop chasing vulnerability intel across fragme...

CVE-2026-1056

creationtimestamp| type| source ---|---|--- 2026-01-28 13:55:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdiggqeliv27 2026-01-28 14:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdigsfe4h32t 2026-01-29 21:15:25+00:00| seen|...

From Triage to Threat Hunts: How AI Accelerates SecOps

If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total autonomy. Vendors seized on the idea of the "Autonomous SOC" and suggested a future where algorithms replaced analysts. That future has not arrived. We have not seen mass layoff...

Phantom Malware in Android Game Mods Hijacks Devices for Ad Fraud

Another day, another Android malware strain. This time, Phantom malware aka Android.Phantom is targeting users who install third-party gaming apps from unofficial sources...

CVE-2025-40536

creationtimestamp| type| source ---|---|--- 2026-01-28 10:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2czwies2c 2026-01-28 11:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi4mjfhgg27 2026-01-28 13:21:55+00:00| seen|...

CVE-2025-40554

creationtimestamp| type| source ---|---|--- 2026-01-28 10:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi223hlln2h 2026-01-28 10:15:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi24m6iem2r 2026-01-28 13:21:55+00:00| seen|...

CVE-2025-67645

creationtimestamp| type| source ---|---|--- 2026-01-28 00:52:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2nxqvfl22 2026-01-28 01:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4vf33q22g...

CVE-2025-55292

creationtimestamp| type| source ---|---|--- 2026-01-28 00:52:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2nqk5w323 2026-01-28 01:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh64xxbqv2c 2026-04-24 09:00:04+00:00| published-proof-of-concept|...

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A code execution vulnerability exists in Google Go due to an insecure construction of external VCS commands when handling untrusted module sources or malicious version strings in...

CVE-2026-24736

creationtimestamp| type| source ---|---|--- 2026-01-27 21:24:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgozh3zj52n 2026-01-27 21:52:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgql7npt62v...

CVE-2026-24858

creationtimestamp| type| source ---|---|--- 2026-01-27 20:18:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdglczbdf425 2026-01-27 20:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdglo52jys2c 2026-01-27 20:44:41+00:00| seen|...

CVE-2025-69052

creationtimestamp| type| source ---|---|--- 2026-01-27 17:25:57+00:00| seen| Telegram/zQovba3jq34R8mOIwo4UQbXIwilVvhjiGRRMMjnKXHFewE 2026-01-27 17:26:11+00:00| seen| Telegram/MruT4zr3HDjAavow11whz2OZvcarBdRDLsNpY1B7JokuVE...