CVE-2026-42224

creationtimestamp| type| source ---|---|--- 2026-05-09 19:54:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgzlgsxhl2k...

CVE-2026-42246 net-imap vulnerable to STARTTLS stripping via invalid response timing

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10,...

CVE-2026-42246

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10,...

PT-2026-39324

Name of the Vulnerable Software and Affected Versions EZVIZ products affected versions not specified Description Certain products use outdated cloud feature modules with legacy API interfaces, creating a data transmission risk. This allows attackers to obtain data by eavesdropping on network...

CVE-2026-42302

creationtimestamp| type| source ---|---|--- 2026-05-08 23:25:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuuesn3g2q 2026-05-09 00:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf24tccw72t 2026-05-09 04:30:30+00:00| seen|...

ex_webrtc client-role handshake is missing DTLS peer fingerprint validation

Summary Missing DTLS peer certificate fingerprint validation in the DTLS client active role removes one side of WebRTC's mutual authentication. The bug is not independently exploitable for media interception in standard deployments, but enables a full man-in-the-middle attack when chained with...

EUVD-2026-28618

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements before building the pairing response smpcmdpairingreq currently builds the pairing response from the initiator authreq before enforcing the local BTSECURITYHIGH requirement. If th...

CVE-2026-43334

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements before building the pairing response smpcmdpairingreq currently builds the pairing response from the initiator authreq before enforcing the local BTSECURITYHIGH requirement. If th...

CVE-2026-43334

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements before building the pairing response smpcmdpairingreq currently builds the pairing response from the initiator authreq before enforcing the local BTSECURITYHIGH requirement. If th...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a corruption in the on-the-fly encryption process in the SMB2write function. This vulnerability may cau...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the on-the-fly decryption of ESP inputs within shared skb fragments, potentially leading to data...

Exploit for Improper Certificate Validation in Bluestacks

CVE-2025-44964 — BlueStacks v5.20 Improper SSL Certificate Val...

CVE-2026-35435

creationtimestamp| type| source ---|---|--- 2026-05-07 23:07:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdgylprl2k 2026-05-07 23:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcenyy4mm2n 2026-05-08 10:39:35+00:00| seen|...

CVE-2026-33823

creationtimestamp| type| source ---|---|--- 2026-05-07 23:06:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdea5keo2z 2026-05-07 23:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcdej3df22k 2026-05-08 22:37:07+00:00| seen|...

CVE-2026-33109

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcczwywij2t 2026-05-07 23:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcewzlg7s2k 2026-05-09 02:48:37+00:00| seen|...

CVE-2026-4430 Heap Buffer Overflow in AgileEngine

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7...

EUVD-2026-28238

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

PT-2026-38362

Name of the Vulnerable Software and Affected Versions Claude Desktop versions 1.2581.0 through 1.4303.0 Description The SSH remote development feature fails to compare the server's presented host key against the stored key, verifying only if the hostname exists in the /.ssh/known hosts file. This...

CVE-2026-41484

OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, when a request to the configured back-end or collector results in an unsuccessful HTTP 4xx or 5xx response, the HttpJsonPostTransport class reads the...

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

Description Overview When LDAP TLS is enabled LDAPUSETLS = True, Lemur's LDAP authentication module unconditionally disables TLS certificate verification at the global ldap module level. This allows a man-in-the-middle attacker positioned between Lemur and the LDAP server to intercept all...