CVE-2026-42999

creationtimestamp| type| source ---|---|--- 2026-05-28 16:08:57+00:00| seen| https://bsky.app/profile/jssfr.zombofant.net.ap.brid.gy/post/3mmwfswfjiez2 2026-05-28 16:09:26+00:00| seen| https://bsky.app/profile/jssfr.zombofant.net.ap.brid.gy/post/3mmwftqupgjt2 2026-05-28 21:13:02+00:00| seen|...

State of Post Quantum Cryptography

Discussion of PQC relevant statistics that we see across our customers and other data sources...

CVE-2026-9789

creationtimestamp| type| source ---|---|--- 2026-05-28 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116650319974507739 2026-05-28 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmv6s36qac22 2026-05-30 11:00:11+00:00| seen|...

CVE-2026-8915

creationtimestamp| type| source ---|---|--- 2026-05-28 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116649612164274667 2026-05-28 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmuuq7gg262p 2026-05-28 02:54:06+00:00| seen|...

Music Player Daemon 安全漏洞

Music Player Daemon is an open-source music playback daemon. Versions of Music Player Daemon prior to 0.24.11 contained a security vulnerability. This vulnerability stemmed from the pcmunpack24be function in src/pcm/Pack.cxx, which had a stack buffer overflow issue. This could allow unauthorized...

CVE-2026-9208

creationtimestamp| type| source ---|---|--- 2026-05-27 23:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumeouq6o26 2026-05-27 23:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunvwkxrk2p 2026-06-02 20:07:07+00:00| seen|...

CVE-2026-44713

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj257hxw2r 2026-05-27 23:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmumjuesms2q...

CVE-2026-44711

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizndlat2n 2026-05-27 23:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuo6uzrkl2i...

CVE-2026-46425

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n 2026-05-27 19:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i...

CVE-2026-48149

creationtimestamp| type| source ---|---|--- 2026-05-27 19:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n 2026-05-27 19:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n...

CVE-2026-46427

Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources/datasources.ts masks only datasource config fields whose schema type is DatasourceFieldType.PASSWORD. The Snowflake integration types its privateKey field as...

CVE-2026-49046

creationtimestamp| type| source ---|---|--- 2026-05-27 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyalfzif2e 2026-05-27 17:16:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtz3fj3rtw2...

GHSA-36FC-7WJG-MFVJ Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...

Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...

CVE-2026-8175

creationtimestamp| type| source ---|---|--- 2026-05-27 15:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrm3smoa2w 2026-05-27 15:59:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtutxmoug2i 2026-06-05 20:07:07+00:00| seen|...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

DEBIAN-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

UBUNTU-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679 libusb < 1.0.30 NULL Pointer Dereference in parse_interface()

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...