Login
Linux CVEs, more than you ever wanted to know
(kroah.com) by voxadam | view | 54 comments
FFmpeg Calls Google's AI Bug Reports "CVE Slop"
(itsfoss.com) by speckx | view | 0 comments
React2Shell (CVE-2025-55182/CVE-2025-66478)
(react2shell.com) by orkj | view | 3 comments
CVE-2025-55182: pre-auth remote code execution in React Server Components
(nvd.nist.gov) by janandonly | view | 0 comments
Red Hat Introduces Project Hummingbird focused on Cloud-Native Dev & "Zero-CVE"
(redhat.com) by boilerupnc | view | 1 comments
Squidbleed (CVE-2026-47729)
(blog.calif.io) by quyleanh | view | 0 comments
CVE-2025-50165: Critical Flaw in Windows Graphics Component
(zscaler.com) by galenelias | view | 0 comments
Runc container breakouts: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881
(openwall.com) by eyberg | view | 0 comments
CVE Daily, RSS Feed Generation Back End
(github.com) by PredestinedPriv | view | 0 comments
Bitcoin Value Overflow Incident (CVE-2010-5139)
(learnbitcoin.com) by granya | view | 0 comments
Postgres minor releases closing 11 CVEs
(postgresql.org) by tee-es-gee | view | 0 comments
Original PoCs for React2Shell CVE-2025-55182
(github.com) by dbushell | view | 0 comments
High fidelity check for Next.js/RSC RCE (CVE-2025-55182 and CVE-2025-66478)
(slcyber.io) by infosecau | view | 0 comments
PoC for React RCE CVE-2025-55182
(github.com) by croemer | view | 1 comments
RunC vulnerabilities CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881
(seclists.org) by moebrowne | view | 0 comments
Incident CVE-2026-LGTM
(nesbitt.io) by mooreds | view | 0 comments
Before it gets a number – About CVE, CWE and vulnerabilities prevention
(quodeq.ai) by quodeq | view | 0 comments
The Apple macOS Security Update Review (3 macOS Versions; 82 Unique CVEs)
(thezdi.com) by alwillis | view | 0 comments
Mythos Discovered a CVE in Its Training Data – and That's Still Worrying
(rival.security) by chris_j | view | 0 comments
Dirty Frag (CVE-2026-43284, CVE-2026-43500): Mitigation
(blog.cloudlinux.com) by abdelhousni | view | 0 comments
Show HN: Free no-signup site auditor – secrets, subdomain takeover, CVEs
(theionproject.com) by TheIOn-Project | view | 0 comments
FreeBSD CVE-2026-4747 Log Suggests Mythos Is a Marketing Trick
(flyingpenguin.com) by jgalt212 | view | 0 comments
HAProxy HTTP/3 to HTTP/1 desync via a standalone QUIC FIN (CVE-2026-33555)
(r3verii.github.io) by r3verii | view | 0 comments
We love open source: finding a critical auth bypass in etcd (CVE-2026-33413)
(strix.ai) by bearsyankees | view | 0 comments
Vibe Security Radar: Real CVEs where AI-generated code introduced Bugs
(vibe-radar-ten.vercel.app) by tsgates | view | 0 comments
Security advisory for Cargo (CVE-2026-33056)
(blog.rust-lang.org) by tcbrah | view | 0 comments
Discord won't fix the invisibility bypass CVE, so I made a PoC
(greasyfork.org) by xmrcat | view | 0 comments
New Vulnerability in n8n – CVE-2026-21858
(schneier.com) by 882542F3884314B | view | 0 comments
Ni8mare – Unauthenticated Remote Code Execution in N8n (CVE-2026-21858)
(cyera.com) by tamnd | view | 0 comments
POC for CVE-2025-55182 (react4shell)
(gist.github.com) by jimmyl02 | view | 0 comments
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
(socket.dev) by feross | view | 0 comments
Some thoughts around Django SQL Injection CVE-2025-64459
(shivasurya.me) by shivasurya | view | 0 comments
Escaping Claude Cowork's local VM sandbox via CVE-2026-46331
(accomplish.ai) by _orcaman_ | view | 0 comments
Oracle VM VirtualBox Bug Discovered by AI: CVE-2026-60161
(octane.beehiiv.com) by runeks | view | 0 comments
Which CVEs should I add to my Python security benchmark for AI agents?
(github.com) by ggattip | view | 1 comments
Dirty-Pedit (CVE-2026-46331): Novel page-cache corruption bug
(twitter.com) by rjt-gupta | view | 0 comments
RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)
(openwall.com) by ilreb | view | 0 comments
Linux kernel team publishes 432 CVEs in two days
(theregister.com) by speckx | view | 0 comments
Linux CVE flood with catchy names
(git.infradead.org) by Deeg9rie9usi | view | 0 comments
OSS-SEC: 432 Linux kernel CVEs (in less than 32 hours)
(seclists.org) by refp | view | 1 comments
Ask HN: GitHub CVE Delays?
by ioseph | view | 0 comments
Over 400 Linux CVEs published in the last 24 hours alone
(lore.kernel.org) by aghuang | view | 0 comments
Wp2shell (CVE-2026-63030): Pre-Auth RCE Chain in WordPress Core
(fullhunt.io) by mazen160 | view | 0 comments
Show HN: Ansede – Free SAST with 100% CVE recall (Semgrep CE got 23%)
(github.com) by ardyv | view | 0 comments
CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV
(hellorecon.com) by slvnx | view | 0 comments
Microsoft's July 2026 Patch Tuesday fixes 622 CVEs, 2 exploited zero-days
(orca.security) by nyku | view | 0 comments
CVE-2026-15409: SonicWall SMA 1000 SSRF Zero-Day
(hellorecon.com) by slvnx | view | 0 comments
CVE-2026-59208: Cross-Issuer Account Takeover in n8n
(strix.ai) by bearsyankees | view | 0 comments
Show HN: VulnCast – open-source e-paper dashboard for live CVE/exploit Intel
(github.com) by isox | view | 0 comments
Show HN: Free API of 248M aggregated VEX statements: 45% of CVEs not affected
(getreel.dev) by simoneree | view | 0 comments