@thehackerwire.bsky.social🔴 CVE-2026-107703 - Critical (9.8)
@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js t...
https://www.thehackerwire.com/vulnerability/CVE-2026-107703/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107701 - High (8.2)
dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to mo...
https://www.thehackerwire.com/vulnerability/CVE-2026-107701/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-107700 - Critical (9.8)
dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attacke...
https://www.thehackerwire.com/vulnerability/CVE-2026-107700/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-84276 - High (7.5)
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-...
https://www.thehackerwire.com/vulnerability/CVE-2026-84276/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107333 - High (8.1)
Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its L...
https://www.thehackerwire.com/vulnerability/CVE-2026-107333/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107303 - High (7.6)
JHipster is a development platform to quickly generate, develop, and deploy modern web applicatio...
https://www.thehackerwire.com/vulnerability/CVE-2026-107303/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107302 - High (7.5)
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder ...
https://www.thehackerwire.com/vulnerability/CVE-2026-107302/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107375 - High (8.8)
JHipster is a development platform to quickly generate, develop, and deploy modern web applicatio...
https://www.thehackerwire.com/vulnerability/CVE-2026-107375/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107377 - High (7.5)
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...
https://www.thehackerwire.com/vulnerability/CVE-2026-107377/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-107376 - High (8.2)
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, Graph...
https://www.thehackerwire.com/vulnerability/CVE-2026-107376/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@hapsis.bsky.socialFakeGit malware campaign returns with 17,610 malicious GitHub repos
@cvesentinel.bsky.social🛑 CVE-2015-3306
ProFTPD ProFTPD
EPSS 97% / KEV: No
TL;DR: The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via t…
https://cvesentinel.com/report/CVE-2015-3306?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
@cvesentinel.bsky.social🛑 CVE-2021-3199
ONLYOFFICE Docs
CVSS 9.8 / EPSS 8% / KEV: No
TL;DR: Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Se…
https://cvesentinel.com/report/CVE-2021-3199?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
@cvesentinel.bsky.social🛑 CVE-2023-22894
Strapi Strapi
CVSS 4.9 / EPSS 2% / KEV: No
TL;DR: Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive …
https://cvesentinel.com/report/CVE-2023-22894?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
@cvesentinel.bsky.social🛑 CVE-2016-3081
Apache Struts
CVSS 8.1 / EPSS 93% / KEV: No
TL;DR: Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Metho…
https://cvesentinel.com/report/CVE-2016-3081?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
@cvesentinel.bsky.social🛑 CVE-2015-5477
ISC BIND
EPSS 91% / KEV: No
TL;DR: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of…
https://cvesentinel.com/report/CVE-2015-5477?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
@thehackerwire.bsky.social🔴 CVE-2026-9209 - Critical (9.8)
mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the L...
https://www.thehackerwire.com/vulnerability/CVE-2026-9209/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-104078 - High (7.8)
Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2....
https://www.thehackerwire.com/vulnerability/CVE-2026-104078/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-104077 - High (7.8)
Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attacke...
https://www.thehackerwire.com/vulnerability/CVE-2026-104077/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105436 - High (8.8)
Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object...
https://www.thehackerwire.com/vulnerability/CVE-2026-105436/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
