CVE-2026-85049

creationtimestamp| type| source ---|---|--- 2026-09-04 00:03:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117209839276217417 2026-09-04 04:46:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

CVE-2026-85433

creationtimestamp| type| source ---|---|--- 2026-09-03 23:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munm643azs2p 2026-09-04 00:09:02+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munodpif7422...

CVE-2026-85048

creationtimestamp| type| source ---|---|--- 2026-09-03 20:00:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208884349943959 2026-09-04 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

CVE-2026-85187

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-85187

itsourcecode Online Medicine Delivery System 1.0 is affected by an SQL injection vulnerability in the Order::pupdate function within the file /rider/orders/controller.php?action=edit&actions=confirm (component: Order Status Update). The vulnerability is triggered by manipulating the ID argument, ...

EUVD-2026-70648

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-85187 itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-71963

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user...

CVE-2026-63435

creationtimestamp| type| source ---|---|--- 2026-09-03 13:31:46+00:00| seen| https://gist.github.com/alon710/29f68a70244d7a5251761f7cfc9eeaab...

CVE-2026-85150

creationtimestamp| type| source ---|---|--- 2026-09-03 11:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h4gneqinjiu47...

EUVD-2026-70382

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-76642 util-linux libmount Privilege Escalation via Failed Mount Helper

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-80726

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117206230142963451 2026-09-04 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muoabrau2k2p...

CVE-2023-46020

creationtimestamp| type| source ---|---|--- 2026-09-03 03:00:05+00:00| seen| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI 2026-09-04 00:01:03+00:00| published-proof-of-concept| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI...

GHSA-FPH4-WMHF-6FWF

creationtimestamp| type| source ---|---|--- 2026-09-02 18:33:43+00:00| seen| https://gist.github.com/alon710/9abc2886db3d6d53b0a6da8c0c0bb7fc 2026-09-03 19:51:59+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:13+00:00| seen|...

CVE-2026-14199

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

ROOT-OS-DEBIAN-11-CVE-2026-34545 CVE-2026-34545 in openexr - Patched by Root

Root has patched CVE-2026-34545 in the openexr package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78657

creationtimestamp| type| source ---|---|--- 2026-09-02 06:56:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ejhs4maroptlv 2026-09-02 07:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujei2lwul2s 2026-09-02 08:07:11+00:00| seen|...

CVE-2026-81426

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...