9219 matches found
UBUNTU-CVE-2026-31716
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-used in journal-replay file record check checkfilerecord validates rec-total against the record size but never validates rec-used. The doaction journal-replay handlers read rec-used from disk and use it to...
CVE-2026-31708
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path smb2ioctlqueryinfo has two response-copy branches: PASSTHRUFSCTL and the default QUERYINFO path. The QUERYINFO branch clamps qi.inputbufferlength to the server-report...
WordPress Dynamic Copyright Year plugin <= 1.0.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Dynamic Copyright Year versions = 1.0.4...
CVE-2026-7435
creationtimestamp| type| source ---|---|--- 2026-04-30 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqpl5zgq22v...
CVE-2026-40950
creationtimestamp| type| source ---|---|--- 2026-04-30 22:01:11+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh4pny72f 2026-04-30 23:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqq7yndzd2i...
CVE-2025-51846
creationtimestamp| type| source ---|---|--- 2026-04-30 17:38:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq5r3kao62n 2026-04-30 20:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqhxmskc32c 2026-04-30 20:56:15+00:00| seen|...
CVE-2025-14956
creationtimestamp| type| source ---|---|--- 2026-04-30 14:51:35+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkpugsdfoc2s...
Exploit for CVE-2026-31431
copy-fail-CVE-2026-31431-C Verifie...
CVE-2026-42012
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...
CVE-2026-38939
creationtimestamp| type| source ---|---|--- 2026-04-29 21:16:09+00:00| seen| https://gist.github.com/spico8/3b8b64a58069fc189ca28563dd1249e8...
Researchers built a chatbot that only knows the world before 1931
The internet's chatbots have read every forum rant, leaked Slack log, and confident blog post your uncle ever wrote about chemtrails. The results are predictable: they reflect the state of the internet, and it isn't pretty. That, along with some questionable design decisions, is partly why Elon...
ROOT-OS-DEBIAN-12-CVE-2026-40310 CVE-2026-40310 in rootio-imagemagick - Patched by Root
Root has patched CVE-2026-40310 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-4047
creationtimestamp| type| source ---|---|--- 2026-04-28 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mklibcksvu2g 2026-04-30 03:00:25+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mkompalp7h2d...
CVE-2026-7294
creationtimestamp| type| source ---|---|--- 2026-04-28 20:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklhtcqdkx2t...
CVE-2026-7354
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltd2klvx2p 2026-05-03 18:00:00+00:00| seen|...
CVE-2026-41400 OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call
OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-start WebSocket frames to cause resource consumption and denial of service...
CVE-2026-7282
creationtimestamp| type| source ---|---|--- 2026-04-28 17:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl3j2nq5g2r...
Five defender priorities from the Talos Year in Review
A familiar theme in security right now is that the barrier to entry for attackers is at an all-time low. AI tools can spin up websites within minutes that can easily direct data to disposable external data stores and send alerts for new captures -- all without code. One such case was recently...