CVE-2026-63464

creationtimestamp| type| source ---|---|--- 2026-09-04 21:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupucvvctj2i 2026-09-08 09:10:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117234637302268713 2026-09-08 09:10:02+00:00| seen|...

CVE-2026-80112

creationtimestamp| type| source ---|---|--- 2026-09-04 20:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqxz52e32z 2026-09-08 03:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muy2uxeu422b 2026-09-08 03:20:06+00:00| seen|...

CVE-2026-85781

creationtimestamp| type| source ---|---|--- 2026-09-04 20:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqwa46yd2v 2026-09-05 01:07:19+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muqc2uiqdl2l 2026-09-05 01:07:21+00:00| seen|...

CVE-2026-18221

creationtimestamp| type| source ---|---|--- 2026-09-04 18:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupkapewaz23 2026-09-09 22:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4lyumq6325...

CVE-2026-85691

creationtimestamp| type| source ---|---|--- 2026-09-04 16:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupdkge46y2h...

EUVD-2026-70816

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-85452

creationtimestamp| type| source ---|---|--- 2026-09-04 00:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munnuxdhy32c...

CVE-2026-85450

creationtimestamp| type| source ---|---|--- 2026-09-04 00:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munnuqnfgu2e...

CVE-2026-85424

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-64197

creationtimestamp| type| source ---|---|--- 2026-09-03 23:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkld3kwi2i...

CVE-2026-85443 MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...

CVE-2026-85432 MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85432 MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-85424

MOOS core-moos (through version 10.4.0) has a missing authentication flaw in its wire protocol (MOOSDB). Unauthenticated clients can bypass the compile-time protocol string check, connect with arbitrary client names, and execute privileged operations including publish , subscribe , and DB_CLEAR (...

CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-83959

creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54icful2h...

CVE-2026-85012

creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54bf6vr24 2026-09-03 19:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iofkhwgq3tae3 2026-09-03 20:32:56+00:00| seen|...

agent-vault-proxy v1.1.1

Keys on the Wire Your AI agent never holds your API keys. It sends a placeholder; the real secret is swapped in on the wire. Stops credential stealers Shai-Hulud and similar and prompt-injected agents from leaking your secrets. A compromised agent has nothing to take. How it works 1. Your agent...