CVE-2026-13553

creationtimestamp| type| source ---|---|--- 2026-06-29 11:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpggeworr225 2026-06-29 14:06:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpgnuv2el52b...

PYSEC-2026-553 TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...

CVE-2026-57346

creationtimestamp| type| source ---|---|--- 2026-06-29 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832929520702680 2026-06-29 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpgbtbqce425 2026-07-05 19:16:18+00:00| seen|...

CVE-2026-22078

creationtimestamp| type| source ---|---|--- 2026-06-29 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832575628329249 2026-06-29 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpg4sdsfah27 2026-06-29 11:36:08+00:00| seen|...

CVE-2026-13543

creationtimestamp| type| source ---|---|--- 2026-06-29 08:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3umb4vk2y 2026-06-29 11:21:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgeo73rxb2b 2026-06-29 12:41:08+00:00| seen|...

CVE-2026-10083

creationtimestamp| type| source ---|---|--- 2026-06-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832221707811519 2026-06-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfxrflfcf2b 2026-06-29 07:54:05+00:00| seen|...

CVE-2026-13517

creationtimestamp| type| source ---|---|--- 2026-06-29 04:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfnpmrrnt2g 2026-06-29 04:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfogzgbm62z 2026-06-29 05:02:01+00:00| seen|...

PT-2026-53621

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2026-13501

creationtimestamp| type| source ---|---|--- 2026-06-28 18:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekt3enxj2p 2026-06-28 19:31:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepm7syd22u 2026-06-29 19:44:25+00:00| seen|...

CVE-2026-13504

creationtimestamp| type| source ---|---|--- 2026-06-28 17:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekb6izsd2u 2026-06-28 19:28:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepfk2nxr2c...

CVE-2026-13498

creationtimestamp| type| source ---|---|--- 2026-06-28 14:20:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe67psnga2t 2026-06-28 14:36:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe74wouru2m 2026-06-29 19:30:51+00:00| seen|...

CVE-2026-13497

creationtimestamp| type| source ---|---|--- 2026-06-28 14:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe54zlv2n2u 2026-06-28 14:38:11+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe77bhkbv23 2026-06-29 15:28:53+00:00| seen|...

zuixingongju-resources

zuixingongju-resources HW Red Team Arsenal – Resource fil...

CVE-2026-12415

creationtimestamp| type| source ---|---|--- 2026-06-27 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u 2026-06-27 06:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s 2026-06-27 06:25:12+00:00| seen|...

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merged upstream commit bf1b731ee6 fixed the original name-only approval bypass by making build policy consume the resolved dependency identity. One collision remained: the generic...

Unsafe Dependency Resolution

Overview @pnpm/building.policy is a Create a function for filtering out dependencies that are not allowed to be built Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the approval process for dependency sources. An attacker can execute unauthorized code during...

Cargo crates in third party registries can override the cached source of other crates

The Rust Security Response Team was notified that Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. This vulnerability is tracked as CVE-2026-5223. The...

CVE-2020-14330

creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Fluentd allows dynamically constructing file paths using the $tag placeholder. It was discovered that validation for this placeholder was insufficient. If a Fluentd instance is configured to receive logs from untrusted sources and uses the $tag placeholder in file configurations such as the path...

GHSA-44HJ-4M45-FRJ3 Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Fluentd allows dynamically constructing file paths using the $tag placeholder. It was discovered that validation for this placeholder was insufficient. If a Fluentd instance is configured to receive logs from untrusted sources and uses the $tag placeholder in file configurations such as the path...