Skip to content
skopnix
Section C · The archive
Every edition · newest first

The archive.

1,109 dispatchespage 8 / 19№ 689 – 630

  1. Wed 16 Sep 2026

    25 dispatches
    GHSA-33f5-2c5q-wgwj: RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata DiscoveryVULN
  2. GHSA-7prp-2623-8g45: djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathVULN
  3. GHSA-c7c5-5j6r-q957: djust has broken object-level access control (IDOR)VULN
  4. GHSA-xhhm-f6hp-2qwj: djust has an authorization bypass on the WebSocket/SSE mount pathVULN
  5. CISA adds CVE-2026-76460 (Cisco Identity Services Engine) to the Known Exploited Vulnerabilities catalogKEV
  6. GHSA-r2pf-9cw4-5j65: node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource ExhaustionVULN
  7. Cisco Advance Notification for Publication of September 16, 2026, Security AdvisoriesKEV
  8. GHSA-pg97-jvmf-qfvc: djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can driveVULN
  9. GHSA-5h8j-6crg-7rmw: LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response()EXPL
  10. GHSA-3492-cvg7-9mr2: djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' dataVULN
  11. GHSA-cc7c-9jff-58wj: djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerVULN
  12. GHSA-v8pv-4842-x354: OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOSVULN
  13. GHSA-8g2f-g3gq-5rjv: djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docsVULN
  14. GHSA-cv3r-c5h8-f4g5: @zereight/mcp-gitlab: Unauthenticated arbitrary file read via upload_markdown enables PAT exfiltrationEXPL
  15. CISA adds CVE-2026-58704 (Google Pixel) to the Known Exploited Vulnerabilities catalogKEV
  16. Revolut Data Leak May Trace Back to Compromised Italian Government AccountsBRCH
  17. Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)VULN
  18. US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance MalwareAPT
  19. Vulnerabilities in WNC T-Mobile 5G Box IDU routersVULN
  20. Critical ScreenConnect flaw now actively exploited in attacksEXPL
  21. Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted AttacksKEV
  22. Google Pixel owners urged to patch actively exploited modem flawEXPL
  23. Atomic macOS (AMOS) Stealer ActivityMALW
  24. Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web ShellsEXPL
  25. WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEVKEV

  26. Tue 15 Sep 2026

    19 dispatches
    GHSA-2h44-8472-frjj: @zereight/mcp-gitlab Vulnerable to Server-Side Request ForgeryVULN
  27. GHSA-vmp7-252j-cwp7: @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transportVULN
  28. GHSA-5648-rgj9-v224: @zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypassVULN
  29. GHSA-4595-rvpx-4q34: emp3r0r has an unauthenticated HTTP Polling DoSVULN
  30. GHSA-gq9p-f254-h286: Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZEVULN
  31. GHSA-5hq8-qhww-jm7q: libp2p-quic: Remote panic via certificate expiry race during QUIC handshakeVULN
  32. GHSA-cp4q-fqw9-4hf6: Http4s Ember HTTP/2: unbounded continuation frame accumulationVULN
  33. GHSA-fm4g-76c9-7w69: Http4s: DigestAuth nonce map grows unboundedVULN
  34. GHSA-9998-894r-fwvr: Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)VULN
  35. GHSA-8h4c-x2wg-6xp8: Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)VULN
  36. Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’APT
  37. Cisco email security boxes can be rooted by... an emailEXPL
  38. Cisco warns customers of actively exploited zero-day in email gatewaysEXPL
  39. Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks DataBRCH
  40. Hackers target WordPress sites via third-party WooCommerce pluginEXPL
  41. Ransomware: qilin → ADMRANS
  42. NCSC-2026-0369 [1.00] [M/H] Kwetsbaarheid verholpen in Palo Alto Networks PAN-OSVULN
  43. Iranian cyber targeting of dissidents, activists and journalistsAPT
  44. One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under FireEXPL

  45. Mon 14 Sep 2026

    9 dispatches
    GHSA-vrh8-c9cm-wh8v: ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token ExchangeVULN
  46. CISA adds CVE-2026-76461 (Cisco Secure Email Gateway) to the Known Exploited Vulnerabilities catalogKEV
  47. GHSA-rrxg-g2pf-6hh4: ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgradeVULN
  48. Android security advisory – September 2026 monthly rollup (AV26-920) – Update 1VULN
  49. Weekly brief — Azerbaijan (2026-W38)MISC
  50. Weekly exposure digest — Azerbaijan (2026-W38)MISC
  51. Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code ExecutionEXPL
  52. ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like AttacksEXPL
  53. Smish. Click. Drained: Inside the Smishing Triad’s Phishing CockpitMALW

  54. Sun 13 Sep 2026

    4 dispatches
    Hackers exploit Tencent app flaw to deploy GrayRabbit malwareEXPL
  55. Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate DataBRCH
  56. Ransomware: shinyhunters → Kimberly-ClarkBRCH
  57. Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploitedEXPL

  58. Sat 12 Sep 2026

    3 dispatches
    BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-DaysEXPL
  59. OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc ServersSUPL
  60. Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeterKEV