CERTFR-2026-ACT-028

creationtimestamp| type| source ---|---|--- 2026-06-29 13:18:55+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mpglahrxgg2r 2026-06-29 13:19:01+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116833591913906031 2026-06-30 09:08:15+00:00| seen|...

CVE-2026-13564

creationtimestamp| type| source ---|---|--- 2026-06-29 12:58:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgk447yh72n 2026-06-29 13:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpglvanai52b 2026-06-29 13:30:38+00:00| seen|...

CVE-2026-46215

creationtimestamp| type| source ---|---|--- 2026-06-29 12:49:04+00:00| seen| https://bsky.app/profile/linkersec.bsky.social/post/3mpgjkues7s2o 2026-06-29 12:49:24+00:00| seen| https://bsky.app/profile/linkersec.bsky.social/post/3mpgjlgty6s2o 2026-06-29 18:08:50+00:00| seen|...

CVE-2026-13553

creationtimestamp| type| source ---|---|--- 2026-06-29 11:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpggeworr225 2026-06-29 14:06:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpgnuv2el52b...

PYSEC-2026-553 TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...

CVE-2026-57346

creationtimestamp| type| source ---|---|--- 2026-06-29 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832929520702680 2026-06-29 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpgbtbqce425 2026-07-05 19:16:18+00:00| seen|...

CVE-2026-22078

creationtimestamp| type| source ---|---|--- 2026-06-29 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832575628329249 2026-06-29 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpg4sdsfah27 2026-06-29 11:36:08+00:00| seen|...

CVE-2026-13543

creationtimestamp| type| source ---|---|--- 2026-06-29 08:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3umb4vk2y 2026-06-29 11:21:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgeo73rxb2b 2026-06-29 12:41:08+00:00| seen|...

CVE-2026-10083

creationtimestamp| type| source ---|---|--- 2026-06-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832221707811519 2026-06-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfxrflfcf2b 2026-06-29 07:54:05+00:00| seen|...

CVE-2026-13517

creationtimestamp| type| source ---|---|--- 2026-06-29 04:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfnpmrrnt2g 2026-06-29 04:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfogzgbm62z 2026-06-29 05:02:01+00:00| seen|...

CVE-2026-13501

creationtimestamp| type| source ---|---|--- 2026-06-28 18:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekt3enxj2p 2026-06-28 19:31:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepm7syd22u 2026-06-29 19:44:25+00:00| seen|...

CVE-2026-13504

creationtimestamp| type| source ---|---|--- 2026-06-28 17:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekb6izsd2u 2026-06-28 19:28:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepfk2nxr2c...

CVE-2026-13498

creationtimestamp| type| source ---|---|--- 2026-06-28 14:20:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe67psnga2t 2026-06-28 14:36:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe74wouru2m 2026-06-29 19:30:51+00:00| seen|...

CVE-2026-13497

creationtimestamp| type| source ---|---|--- 2026-06-28 14:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe54zlv2n2u 2026-06-28 14:38:11+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe77bhkbv23 2026-06-29 15:28:53+00:00| seen|...

zuixingongju-resources

zuixingongju-resources HW Red Team Arsenal – Resource fil...

CVE-2026-12415

creationtimestamp| type| source ---|---|--- 2026-06-27 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u 2026-06-27 06:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s 2026-06-27 06:25:12+00:00| seen|...

Unsafe Dependency Resolution

Overview @pnpm/building.policy is a Create a function for filtering out dependencies that are not allowed to be built Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the approval process for dependency sources. An attacker can execute unauthorized code during...

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merged upstream commit bf1b731ee6 fixed the original name-only approval bypass by making build policy consume the resolved dependency identity. One collision remained: the generic...

CVE-2020-14330

creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Fluentd allows dynamically constructing file paths using the $tag placeholder. It was discovered that validation for this placeholder was insufficient. If a Fluentd instance is configured to receive logs from untrusted sources and uses the $tag placeholder in file configurations such as the path...