CVE-2026-24221

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6febj5d2q...

CVE-2026-40715

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6f4rnyv2r...

CVE-2026-45685

Summary: OpenTelemetry eBPF Instrumentation is affected by a remote DoS in its MongoDB parser. From version 0.1.0 up to before 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing an unauthenticated attacker to crash the telemetry agent and termin...

CVE-2026-45685 OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetr...

JDWPEx

JDWP Remote Code Execution Exploit A Python 3 implement...

wireapp wire-ios 数字错误漏洞

wire-ios is the client layer that handles all data displayed in mobile applications. Versions of wire-ios prior to 4.16.0 have a numerical error vulnerability, which stems from a lack of length checking. This vulnerability may lead to crashes when receiving specially crafted malicious Proteus...

PT-2026-45830

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-44421

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwskan22d 2026-07-22 15:02:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mralqohnlq2y...

CVE-2026-45372

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgmyzox52g 2026-05-29 21:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmziti3zcz2h 2026-05-30 10:08:12+00:00| seen|...

CVE-2026-49368

creationtimestamp| type| source ---|---|--- 2026-05-29 20:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdm6qegs25 2026-05-29 22:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjxbuxx72v 2026-06-01 14:37:05+00:00| seen|...

CVE-2026-32905

creationtimestamp| type| source ---|---|--- 2026-05-29 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyzaf633z2v 2026-06-01 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnb72hkvlb25...

CLSA-2026-1780062671 Fix CVE(s): CVE-2026-41035

SECURITY UPDATE: receiver use-after-free in receivexattr via a wire-supplied xattr count passed to qsort: - debian/patches/els/0007-CVE-2026-41035.patch: sort tempxattr.count stored items instead of the untrusted wire count. - CVE-2026-41035...

CVE-2026-49325

The CVE affects the Indian Motorcycle Scout Bobber + Tech 2025 model year, where the Wireless Control Module (WCM) wiring harness controls anti‑theft shutdown. A falling‑edge voltage transition on a dedicated wire pair signals shutdown to a peer ECU, but the receiving ECU cannot distinguish an ac...

CVE-2026-46833

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzicpkh227 2026-05-28 23:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6v6fxgl2j 2026-05-29 14:45:07+00:00| seen|...

CVE-2026-47333

creationtimestamp| type| source ---|---|--- 2026-05-28 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsruwd5o2w 2026-05-28 21:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxp6nfb52r 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-47759

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l 2026-05-28 17:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i 2026-05-28 21:37:06+00:00| seen|...

SUSE CVE-2026-46075

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-46075 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Teste...

CVE-2026-42761

creationtimestamp| type| source ---|---|--- 2026-05-27 12:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkdikrp2n 2026-05-27 12:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmthuwuia32e...