Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-107058 - An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us
NEAR-REAL-TIME
CVE-2026-107058 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107057 - An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
NEAR-REAL-TIME
CVE-2026-107057 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107056 - Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized
NEAR-REAL-TIME
CVE-2026-107056 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-107055 - Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to
NEAR-REAL-TIME
CVE-2026-107055 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107053 - Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write a
NEAR-REAL-TIME
CVE-2026-107053 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-107052 - Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack
NEAR-REAL-TIME
CVE-2026-107052 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107051 - Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb
NEAR-REAL-TIME
CVE-2026-107051 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107050 - An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in the
NEAR-REAL-TIME
CVE-2026-107050 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-107049 - An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply
NEAR-REAL-TIME
CVE-2026-107049 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107048 - An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute
NEAR-REAL-TIME
CVE-2026-107048 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-107047 - Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap
NEAR-REAL-TIME
CVE-2026-107047 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107046 - A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att
NEAR-REAL-TIME
CVE-2026-107046 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107045 - Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta
NEAR-REAL-TIME
CVE-2026-107045 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-107044 - Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani
NEAR-REAL-TIME
CVE-2026-107044 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107043 - Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM
NEAR-REAL-TIME
CVE-2026-107043 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
MEDIUM
CVE-2025-12523 - Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
NEAR-REAL-TIME
CVE-2025-12523 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2023-7357 - A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul
NEAR-REAL-TIME
CVE-2023-7357 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
HIGH
CVE-2026-118764 - minimatch: minimatch: Denial of Service via crafted glob pattern expansion
NEAR-REAL-TIME
CVE-2026-118764 · Red Hat - CVE Feed · published 2026-10-29T17:07 · correlated from 3 sources
Red Hatminimatch
Source ↗
HIGH
GHSA-qr28-fpjm-wq7f - decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs
NEAR-REAL-TIME
CVE-2026-118664 · GitHub Security Advisories · published 2026-10-29T16:41 · correlated from 3 sources
decode-uri-componentRed Hat
Source ↗
HIGH
GHSA-vpp8-g58w-m8mp - Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-29T16:41
Twisted
Source ↗