Linux Distros Unpatched Vulnerability : CVE-2026-3054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site...

VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)

Advisory ID: | VMSA-2026-0001.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.2 - 8.1 Synopsis: | VMware Aria Operations updates address multiple vulnerabilities CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721 Issue date: | 2026-02-24 Updated on: | 2026-03-03 Updated Advisory CVEs |...

Alinto SOGo 代码注入漏洞

Alinto SOGo is an open-source collaboration office software developed by Alinto. Versions 5.12.3 and 5.12.4 of Alinto SOGo contain a code injection vulnerability. This vulnerability stems from incorrect handling of parameter hints, which may lead to cross-site scripting attacks...

Security Bulletin: NVIDIA License System - February 2026

NVIDIA has released an update for the Delegated License Service DLS component of NVIDIA License System to address a security issue that might lead to impacts described in this bulletin. To protect your system, download and install the latest version of the DLS. To simplify the upgrade of an...

CVE-2026-2588

creationtimestamp| type| source ---|---|--- 2026-02-23 20:31:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkin4qheb2k 2026-02-23 20:33:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkiqo2bxm2s 2026-02-23 20:52:18+00:00| seen|...

CVE-2026-21863

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimv644b26 2026-02-23 20:32:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkiqgpgpw2s 2026-02-23 21:12:18+00:00| seen|...

CVE-2025-67733

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimlakdt25 2026-02-23 20:31:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinnkzsp2c 2026-02-23 21:07:19+00:00| seen|...

CVE-2026-27623

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkime3b3w2s 2026-02-23 20:31:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkingdasx2c 2026-02-23 21:32:19+00:00| seen|...

CVE-2026-27623 Valkey has Pre-Authentication DOS from malformed RESP request

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

GO-2026-4530 Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik

Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik...

CVE-2025-70044

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...

CVE-2025-40701 Reflected Cross-Site scripting (XSS) in SOTE's SOTESHOP

Reflected Cross-Site Scripting vulnerability in SOTESHOP, version 8.3.4. THis vulnerability allows an attacker execute JavaScript code in the victim's browser when a malicious URL with the 'id' parameter in '/adsTracker/checkAds' is sent to the victim. The vulnerability can be exploited to steal...

CVE-2026-2959

creationtimestamp| type| source ---|---|--- 2026-02-23 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfidv3dn2t2u 2026-02-23 00:00:55+00:00| seen| https://infosec.exchange/users/offseq/statuses/116117001877252256 2026-02-23 01:00:39+00:00| seen|...

PT-2026-22021

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A previous fix for a heap-use-after-free issue was incomplete. The vulnerable code exists in the SDL2 implementation, where a pointer...

PT-2026-21560

Name of the Vulnerable Software and Affected Versions erzhongxmu JEEWMS versions up to 3.7 Description A flaw exists in erzhongxmu JEEWMS, specifically within the UEditor component, affecting the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp. The myEditor argument can be manipulated to...

Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.116/117 for Windows/Mac and 145.0.7632.116 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Fedora: Security Advisory (FEDORA-2026-c06fd97a53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OWASP Smart Contract Top 10

The OWASP Smart Contract Top 10: 2026 is a standard awareness document that aims to provide Web3 developers and security teams with insights into the top 10 vulnerabilities found in smart contracts. It is a sub‑project of the broader OWASP Smart Contract Security OWASP SCS initiative. It serves a...

OpenClaw, Moltbook, and ClawdLab: From Agent-Only Social Networks to Autonomous Scientific Research

In January 2026, the open-source agent framework OpenClaw and the agent-only social network Moltbook produced a large-scale dataset of autonomous AI-to-AI interaction, attracting six academic publications within fourteen days. This study conducts a multivocal literature review of that ecosystem a...

CVE-2025-70044

CVE-2025-70044 affects fofolee uTools-quickcommand 5.0.3. The issue is improper certificate validation (CWE-295) and is described as a network-reachable vulnerability with medium severity (CVSS v3.1: 6.5). The Red Hat, NVD, and CVE records concur on the affected software version and the root caus...