GHSA-F637-W7P2-M7FX

creationtimestamp| type| source ---|---|--- 2026-06-24 18:43:21+00:00| seen| https://gist.github.com/alon710/f2b2f51072808beda8e52a43b0bdd064 2026-06-24 19:04:03+00:00| seen| https://gist.github.com/alon710/1366cab1be37fd922161593dd6bd5218...

CVE-2026-48725 Warp may allow terminal output to access the local clipboard through OSC 52

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable00 until 0.2026.05.06.15.42.stable01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger...

[SECURITY] [DLA 4645-1] cloud-init - correct sources.list generation

------------------------------------------------------------------------- Debian LTS Advisory DLA-4645-1 [email protected] https://www.debian.org/lts/security/ Noah Meyerhans June 24, 2026 https://wiki.debian.org/LTS -...

CVE-2026-12850

creationtimestamp| type| source ---|---|--- 2026-06-24 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116804971963043616 2026-06-24 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mozujnki732w...

CVE-2026-52940

creationtimestamp| type| source ---|---|--- 2026-06-24 08:38:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116804178176541056 2026-06-24 10:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqbszocp2x 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-52935

creationtimestamp| type| source ---|---|--- 2026-06-24 08:12:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116804074266316465 2026-06-24 10:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozpln4nyf2k 2026-07-06 06:24:54+00:00| seen|...

CVE-2026-12417

creationtimestamp| type| source ---|---|--- 2026-06-24 08:03:09+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mozhba5qeo2p 2026-06-24 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mozpiorzoj2l 2026-06-24 10:30:38+00:00| seen|...

GHSA-W2J7-F3C6-G8CW

creationtimestamp| type| source ---|---|--- 2026-06-24 01:41:39+00:00| seen| https://gist.github.com/alon710/31eb26fe10a0715b39c427020e06d517 2026-06-24 01:52:32+00:00| seen| https://gist.github.com/alon710/5069ba47a341c9374d265742c0ed2c0f...

CVE-2026-11972

creationtimestamp| type| source ---|---|--- 2026-06-24 00:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymcnbuyj26 2026-06-24 00:49:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moyp2iphbn2f 2026-06-25 12:00:20+00:00| seen|...

OctoPrint has XSS in its Suppressed Command Notifications

Impact OctoPrint versions up to and including 1.11.7 as well as 2.0.0rc1 and 2.0.0rc2 are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Suppressed Command notifications popups generated by the printer. An attacker who successfully convinces a victim to...

Cross-site Scripting (XSS)

Overview OctoPrint is a snappy web interface for your 3D printer Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Suppressed Command notifications process. An attacker can execute arbitrary HTML or JavaScript code by convincing a user to print a specially crafte...

The Rise of AI-Powered Academic Fraud: Beyond Traditional Plagiarism

AI has changed academic fraud. It now creates original-looking work, fake sources, and hidden misconduct that schools must learn to detect...

GHSA-74P7-6H78-GW8P

creationtimestamp| type| source ---|---|--- 2026-06-23 13:42:51+00:00| seen| https://gist.github.com/alon710/11eb496838c824b891dd239de0d0e0b4 2026-06-23 13:51:48+00:00| seen| https://gist.github.com/alon710/ba15b4769d69aa0e2cc9924898cce4e0...

CVE-2026-11374

creationtimestamp| type| source ---|---|--- 2026-06-23 10:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mox6zvolwn2f 2026-06-23 10:30:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116798955994793705 2026-06-23 11:15:33+00:00| seen|...

CVE-2014-9223

creationtimestamp| type| source ---|---|--- 2026-06-23 07:37:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798275755976502 2026-06-23 07:37:37+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mowvekv7fx72...

CVE-2026-11833

creationtimestamp| type| source ---|---|--- 2026-06-23 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowfv5w3xq2w 2026-06-23 03:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797186334941765 2026-06-23 03:15:09+00:00| seen|...

PT-2026-51481

Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including the epoch time which is leaked via t...

FreeBSD : podman -- files outside build context may be included via malicious Git repo or tar archive (fe2e8bdc-ff48-4166-b285-59822c7cf473)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fe2e8bdc-ff48-4166-b285-59822c7cf473 advisory. The Podman developers report: Building a Dockerfile using an ADD or COPY instruction accessing a...

PT-2026-51521

Name of the Vulnerable Software and Affected Versions FOSSBilling versions 0.5.4 through 0.7.x Description An authorization bypass in the API role handling allows unauthenticated access to privileged '/api/system/' endpoints. Because system resolves to the cron admin identity, attackers can invok...

GO-2026-5052 Vulnerability in software.sslmate.com/src/go-pkcs12

Users who decode PKCS12 files from untrusted sources and rely on the password for authentication can be tricked into accepting malicious PKCS12 files...