{"generated_at":"2026-11-04T09:34:14.560Z","since":"2026-11-03T09:34:00.000Z","stack":[],"counts":{"corrections":105,"new_tickets":28,"status_changes":32},"corrections":[{"at":"2026-11-04T06:18:08.488Z","id":"rails-21-security-issues","title":"Rails: 21 security issues","url":"https://pwned.coffee/i/rails-21-security-issues","change":"Fix withdrawn","field":"fix","before":"8.0.5.2, 8.1.4.1","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/509"},{"at":"2026-11-04T06:18:08.488Z","id":"rails-21-security-issues","title":"Rails: 21 security issues","url":"https://pwned.coffee/i/rails-21-security-issues","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-04T06:18:08.488Z","id":"rails-21-security-issues","title":"Rails: 21 security issues","url":"https://pwned.coffee/i/rails-21-security-issues","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"Overheard (news)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/509"},{"at":"2026-11-04T00:17:23.841Z","id":"zammad-gmbh-zammad-improper-privilege-management-vulnerability","title":"Zammad GmbH Zammad Improper Privilege Management Vulnerability","url":"https://pwned.coffee/i/zammad-gmbh-zammad-improper-privilege-management-vulnerability","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-25: a fixed ticket leaves the board 7 days after its last update; its KEV deadline (2026-10-05) passed more than 30 days ago.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","change":"Fix withdrawn","field":"fix","before":"4.1.17","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/502"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/502"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","change":"Fix withdrawn","field":"fix","before":"4.1.17","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/503"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/503"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","change":"Fix withdrawn","field":"fix","before":"4.1.17","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/504"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/504"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-remote-document-loading-cve-2026-90631","title":"Apache OpenOffice: remote document loading","url":"https://pwned.coffee/i/apache-openoffice-remote-document-loading-cve-2026-90631","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/505"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-remote-document-loading-cve-2026-90631","title":"Apache OpenOffice: remote document loading","url":"https://pwned.coffee/i/apache-openoffice-remote-document-loading-cve-2026-90631","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","title":"Apache OpenOffice: local file inclusion via GStreamer","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/506"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","title":"Apache OpenOffice: local file inclusion via GStreamer","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","change":"Fix withdrawn","field":"fix","before":"4.1.17","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/501"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/501"},{"at":"2026-11-03T22:19:38.484Z","id":"us-defense-contractor-security-incident","title":"US Defense Contractor: security incident","url":"https://pwned.coffee/i/us-defense-contractor-security-incident","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"south-korean-presidential-office-data-leak-2","title":"South Korean Presidential Office: data leak","url":"https://pwned.coffee/i/south-korean-presidential-office-data-leak-2","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"xsolis-data-breach","title":"Xsolis: data breach","url":"https://pwned.coffee/i/xsolis-data-breach","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T22:19:38.484Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","title":"Linux kernel: critical vulnerability","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Only news is a public PoC for a CVE published 2026-08-26","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80587"},{"at":"2026-11-03T22:19:38.484Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","title":"Linux kernel: critical vulnerability","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","change":"Fix found","field":"fix","before":"none","after":"7.2, 7.1.10, 6.18.46, 6.12.105, 6.6.153, 6.1.191, 5.15.218","reason":"CVE record (CNA Linux) for CVE-2026-80587: Linux 7.2 and later unaffected (mainline: original commit for fix)","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80587"},{"at":"2026-11-03T22:19:38.484Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","title":"Linux kernel: critical vulnerability","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","change":"Re-plated","field":"bucket","before":"On hold (status unknown)","after":"Order up (fix available)","reason":"CVE record (CNA Linux) for CVE-2026-80587: Linux 7.2 and later unaffected (mainline: original commit for fix)","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80587"},{"at":"2026-11-03T22:19:38.121Z","id":"mlflow-vulnerable-to-remote-code-execution-on-unauthenti-cve-2026-116692","title":"mlflow: remote code execution","url":"https://pwned.coffee/i/mlflow-vulnerable-to-remote-code-execution-on-unauthenti-cve-2026-116692","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T21:18:28.699Z","id":"openvox-rce-and-client-impersonation","title":"OpenVox: RCE and client impersonation","url":"https://pwned.coffee/i/openvox-rce-and-client-impersonation","change":"Fix withdrawn","field":"fix","before":"openvox-agent 9.3.0, openvox-agent 8.32.0, openvox-server 9.2.0, openvox-server 8.18.0, openvoxdb 9.2.0, openvoxdb 8.18.0","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/489"},{"at":"2026-11-03T21:18:28.699Z","id":"openvox-rce-and-client-impersonation","title":"OpenVox: RCE and client impersonation","url":"https://pwned.coffee/i/openvox-rce-and-client-impersonation","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T21:18:28.699Z","id":"openvox-rce-and-client-impersonation","title":"OpenVox: RCE and client impersonation","url":"https://pwned.coffee/i/openvox-rce-and-client-impersonation","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/489"},{"at":"2026-11-03T21:18:28.699Z","id":"chrome-buffer-overflow-in-dawn-cve-2026-121156","title":"Chrome: buffer overflow in Dawn","url":"https://pwned.coffee/i/chrome-buffer-overflow-in-dawn-cve-2026-121156","change":"Re-scored","field":"severity","before":"critical","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-traffic-server-heap-buffer-overflow","title":"Apache Traffic Server: heap-buffer-overflow","url":"https://pwned.coffee/i/apache-traffic-server-heap-buffer-overflow","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-traffic-server-heap-buffer-overflow","title":"Apache Traffic Server: heap-buffer-overflow","url":"https://pwned.coffee/i/apache-traffic-server-heap-buffer-overflow","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/480"},{"at":"2026-11-03T20:19:05.089Z","id":"xen-arbitrary-read-write-via-grant-copy","title":"Xen: arbitrary read/write via grant copy","url":"https://pwned.coffee/i/xen-arbitrary-read-write-via-grant-copy","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"xen-arbitrary-read-write-via-grant-copy","title":"Xen: arbitrary read/write via grant copy","url":"https://pwned.coffee/i/xen-arbitrary-read-write-via-grant-copy","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/481"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","title":"Apache ZooKeeper: SASL authorization bypass","url":"https://pwned.coffee/i/apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","title":"Apache ZooKeeper: SASL authorization bypass","url":"https://pwned.coffee/i/apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/485"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","title":"Apache ZooKeeper: unauthenticated denial of service","url":"https://pwned.coffee/i/apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","title":"Apache ZooKeeper: unauthenticated denial of service","url":"https://pwned.coffee/i/apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/486"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","title":"Apache ZooKeeper: denial of service via multiRead","url":"https://pwned.coffee/i/apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","title":"Apache ZooKeeper: denial of service via multiRead","url":"https://pwned.coffee/i/apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/487"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","title":"Apache ZooKeeper: unbounded recursion via snapshot serialization","url":"https://pwned.coffee/i/apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","title":"Apache ZooKeeper: unbounded recursion via snapshot serialization","url":"https://pwned.coffee/i/apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/488"},{"at":"2026-11-03T18:18:46.173Z","id":"elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","title":"Elo: sandbox escape to code execution","url":"https://pwned.coffee/i/elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/advisories/GHSA-33r5-xmm8-v6x5"},{"at":"2026-11-03T17:17:47.136Z","id":"subnet-powersystem-center-sqli","title":"Subnet PowerSYSTEM Center SQLi","url":"https://pwned.coffee/i/subnet-powersystem-center-sqli","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T17:17:47.136Z","id":"subnet-powersystem-center-sqli","title":"Subnet PowerSYSTEM Center SQLi","url":"https://pwned.coffee/i/subnet-powersystem-center-sqli","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01"},{"at":"2026-11-03T17:17:47.136Z","id":"barracuda-auth-bypass-cmd-inj-cve-2026-116606","title":"Barracuda auth bypass & cmd inj","url":"https://pwned.coffee/i/barracuda-auth-bypass-cmd-inj-cve-2026-116606","change":"Fix found","field":"fix","before":"none","after":"9.4.0.030","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://thehackernews.com/2026/11/barracuda-flaws-could-be-chained-to.html"},{"at":"2026-11-03T17:17:47.136Z","id":"barracuda-auth-bypass-cmd-inj-cve-2026-116606","title":"Barracuda auth bypass & cmd inj","url":"https://pwned.coffee/i/barracuda-auth-bypass-cmd-inj-cve-2026-116606","change":"Re-plated","field":"bucket","before":"86'd (no fix yet)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://thehackernews.com/2026/11/barracuda-flaws-could-be-chained-to.html"},{"at":"2026-11-03T17:17:47.004Z","id":"sentry-javascript-middleware-bypass-when-using-tunnel-ro-cve-2026-114139","title":"Sentry-JavaScript: Middleware Bypass when using Tunnel route","url":"https://pwned.coffee/i/sentry-javascript-middleware-bypass-when-using-tunnel-ro-cve-2026-114139","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-23.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"mikrotik-routeros-improper-enforcement-of-behavioral-wor-cve-2026-67279","title":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","url":"https://pwned.coffee/i/mikrotik-routeros-improper-enforcement-of-behavioral-wor-cve-2026-67279","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"odhcpd-is-the-dhcpv6-dhcpv4-and-router-advertisement-ser-cve-2026-53921","title":"odhcpd: remote code execution","url":"https://pwned.coffee/i/odhcpd-is-the-dhcpv6-dhcpv4-and-router-advertisement-ser-cve-2026-53921","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"laravel-is-a-web-application-framework-cve-2026-114509","title":"Laravel: authentication bypass","url":"https://pwned.coffee/i/laravel-is-a-web-application-framework-cve-2026-114509","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"pillow-heap-buffer-overflow-in-imagingjpegdecode-cve-2026-112403","title":"Pillow 13.0.0 (major upgrade): 5 security fixes","url":"https://pwned.coffee/i/pillow-heap-buffer-overflow-in-imagingjpegdecode-cve-2026-112403","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"litellm-security-advisory-cve-2026-114612","title":"LiteLLM: critical vulnerability","url":"https://pwned.coffee/i/litellm-security-advisory-cve-2026-114612","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"next-js-unauthenticated-remote-code-execution-in-image-optimization-api","title":"Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used","url":"https://pwned.coffee/i/next-js-unauthenticated-remote-code-execution-in-image-optimization-api","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-24.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"wpfactory-product-filter-sql-injection-cve-2026-112866","title":"WPFactory Product Filter: SQL injection","url":"https://pwned.coffee/i/wpfactory-product-filter-sql-injection-cve-2026-112866","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-25.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"echo-rejected-websocket-upgrades-can-bypass-echo-route-level-access-cont","title":"Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls","url":"https://pwned.coffee/i/echo-rejected-websocket-upgrades-can-bypass-echo-route-level-access-cont","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-26.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"next-js-unauthenticated-remote-code-execution-in-use-cache-functions-ret","title":"Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays","url":"https://pwned.coffee/i/next-js-unauthenticated-remote-code-execution-in-use-cache-functions-ret","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-26.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"storybook-missing-origin-validation-in-storybook-preview-cve-2026-114125","title":"Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites","url":"https://pwned.coffee/i/storybook-missing-origin-validation-in-storybook-preview-cve-2026-114125","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-26.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"magento-campaign-infects-953-stores","title":"Magento: campaign infects 953 stores","url":"https://pwned.coffee/i/magento-campaign-infects-953-stores","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-26.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"net-brotli-compression-flaw","title":".NET: Brotli compression flaw","url":"https://pwned.coffee/i/net-brotli-compression-flaw","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"On CISA KEV with deadline 2026-11-10: a KEV ticket stays on the board until 30 days past its deadline.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"monailabel-server-crash-and-silent-inference-corruption-cve-2026-48705","title":"MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)","url":"https://pwned.coffee/i/monailabel-server-crash-and-silent-inference-corruption-cve-2026-48705","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-27.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"structure-remote-code-execution-cve-2026-117532","title":"Structure: remote code execution","url":"https://pwned.coffee/i/structure-remote-code-execution-cve-2026-117532","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-10-27.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:47.004Z","id":"cisco-secure-email-gateway-sql-injection-vulnerability-cve-2026-76461","title":"Cisco Secure Email Gateway SQL Injection Vulnerability","url":"https://pwned.coffee/i/cisco-secure-email-gateway-sql-injection-vulnerability-cve-2026-76461","change":"Back on the board","field":"returned","before":"past orders","after":"on the board","reason":"Updated 2026-11-03.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T17:17:45.789Z","id":"cpguard-linux-server-backdoor","title":"cPGuard: Linux server backdoor","url":"https://pwned.coffee/i/cpguard-linux-server-backdoor","change":"Off the board","field":"excluded","before":"on the board","after":"back to review","reason":"Unconfirmed: a flaw report names no product we can put on the menu, and one report (thehackernews.com) is not enough","source_url":"https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html"},{"at":"2026-11-03T16:37:57.964Z","id":"spreadsheet-xlsx-code-exec-cve-2026-115943","title":"Spreadsheet::XLSX: code exec","url":"https://pwned.coffee/i/spreadsheet-xlsx-code-exec-cve-2026-115943","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/439","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"spreadsheet-xlsx-code-exec-cve-2026-115943","title":"Spreadsheet::XLSX: code exec","url":"https://pwned.coffee/i/spreadsheet-xlsx-code-exec-cve-2026-115943","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/439","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"xs-libbrotli-out-of-bounds-write-cve-2026-115946","title":"XS::libbrotli: out-of-bounds write","url":"https://pwned.coffee/i/xs-libbrotli-out-of-bounds-write-cve-2026-115946","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/460","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"xs-libbrotli-out-of-bounds-write-cve-2026-115946","title":"XS::libbrotli: out-of-bounds write","url":"https://pwned.coffee/i/xs-libbrotli-out-of-bounds-write-cve-2026-115946","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/460","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"http-session-memcached-cmd-inj-cve-2026-13575","title":"HTTP::Session: memcached cmd inj","url":"https://pwned.coffee/i/http-session-memcached-cmd-inj-cve-2026-13575","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/461","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"http-session-memcached-cmd-inj-cve-2026-13575","title":"HTTP::Session: memcached cmd inj","url":"https://pwned.coffee/i/http-session-memcached-cmd-inj-cve-2026-13575","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/461","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"gpac-mp4box-buffer-overflow-cve-2025-60475","title":"GPAC/MP4Box: buffer overflow","url":"https://pwned.coffee/i/gpac-mp4box-buffer-overflow-cve-2025-60475","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/409","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"gpac-mp4box-buffer-overflow-cve-2025-60475","title":"GPAC/MP4Box: buffer overflow","url":"https://pwned.coffee/i/gpac-mp4box-buffer-overflow-cve-2025-60475","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/409","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"gnu-mtools-out-of-bounds-write-cve-2026-118384","title":"GNU mtools: out-of-bounds write","url":"https://pwned.coffee/i/gnu-mtools-out-of-bounds-write-cve-2026-118384","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/455","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"gnu-mtools-out-of-bounds-write-cve-2026-118384","title":"GNU mtools: out-of-bounds write","url":"https://pwned.coffee/i/gnu-mtools-out-of-bounds-write-cve-2026-118384","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/455","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"lean-4-kernel-soundness-bug-cve-2026-72844","title":"leanprover lean4: vulnerability (public PoC)","url":"https://pwned.coffee/i/lean-4-kernel-soundness-bug-cve-2026-72844","change":"Fix status lowered","field":"status","before":"partly patched","after":"fix status unknown","reason":"Re-checked under updated rules: CVE record (CNA VulnCheck) for CVE-2026-72844: lean4 4.33.0-rc1 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72844","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"lean-4-kernel-soundness-bug-cve-2026-72844","title":"leanprover lean4: vulnerability (public PoC)","url":"https://pwned.coffee/i/lean-4-kernel-soundness-bug-cve-2026-72844","change":"Re-plated","field":"bucket","before":"Half-poured (some lines fixed)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: CVE record (CNA VulnCheck) for CVE-2026-72844: lean4 4.33.0-rc1 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72844","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","title":"Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability…","url":"https://pwned.coffee/i/rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/zofe/rapyd-admin","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","title":"Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability…","url":"https://pwned.coffee/i/rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/zofe/rapyd-admin","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","title":"Unknown Checkout Files Upload for WooCommerce: remote code execution","url":"https://pwned.coffee/i/the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103688","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","title":"Unknown Checkout Files Upload for WooCommerce: remote code execution","url":"https://pwned.coffee/i/the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103688","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"openstack-manila-critical-vulnerability-cve-2026-71195","title":"OpenStack Manila: critical vulnerability","url":"https://pwned.coffee/i/openstack-manila-critical-vulnerability-cve-2026-71195","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://launchpad.net/bugs/2161412","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"openstack-manila-critical-vulnerability-cve-2026-71195","title":"OpenStack Manila: critical vulnerability","url":"https://pwned.coffee/i/openstack-manila-critical-vulnerability-cve-2026-71195","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://launchpad.net/bugs/2161412","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"zip-critical-parser-differential-security-control-bypass-cve-2026-115905","title":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","url":"https://pwned.coffee/i/zip-critical-parser-differential-security-control-bypass-cve-2026-115905","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/advisories/GHSA-m665-v7pm-7grj","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"zip-critical-parser-differential-security-control-bypass-cve-2026-115905","title":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","url":"https://pwned.coffee/i/zip-critical-parser-differential-security-control-bypass-cve-2026-115905","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/advisories/GHSA-m665-v7pm-7grj","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","title":"Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability.","url":"https://pwned.coffee/i/authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","change":"Fix status lowered","field":"status","before":"partly patched","after":"fix status unknown","reason":"Re-checked under updated rules: CVE record (CNA certcc) for CVE-2026-96760: Authlib 1.7.2 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96760","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","title":"Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability.","url":"https://pwned.coffee/i/authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","change":"Re-plated","field":"bucket","before":"Half-poured (some lines fixed)","after":"On hold (status unknown)","reason":"Re-checked under updated rules: CVE record (CNA certcc) for CVE-2026-96760: Authlib 1.7.2 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96760","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","title":"Broadcom VMWare ESX Insufficient Logging Vulnerability","url":"https://pwned.coffee/i/broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","change":"Fix corrected","field":"fix","before":"Cloud Foundation 5.2.4, ESX ESXi-9.1.0.0-25370933, ESX ESXi-9.0.2.0100-25595025, ESX ESXi80U3j-25429389","after":"Cloud Foundation / vSphere Foundation (ESX) 9.1.x.x ESXi-9.1.0.0-25370933, Cloud Foundation / vSphere Foundation (ESX) 9.0.x.x ESXi-9.0.2.0100-25595025, ESX 8.0 ESXi80U3j-25429389, Cloud Foundation (ESX) 5.x 5.2.4","reason":"Re-checked under updated rules: Broadcom's response matrix for CVE-2026-41709 (read 2 Nov 2026): fixed builds for ESX 9.1, 9.0 and 8.0, 5.2.4 for Cloud Foundation 5.x, and KB449886 for Telco Cloud Platform 5.0 and 5.1.","source_url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","title":"Broadcom VMWare ESX Insufficient Logging Vulnerability","url":"https://pwned.coffee/i/broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","change":"Re-plated","field":"bucket","before":"Half-poured (some lines fixed)","after":"Order up (fix available)","reason":"Re-checked under updated rules: Broadcom's response matrix for CVE-2026-41709 (read 2 Nov 2026): fixed builds for ESX 9.1, 9.0 and 8.0, 5.2.4 for Cloud Foundation 5.x, and KB449886 for Telco Cloud Platform 5.0 and 5.1.","source_url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:37:57.964Z","id":"apache-struts-command-injection-vulnerability-cve-2016-3081","title":"Apache Struts Command Injection Vulnerability","url":"https://pwned.coffee/i/apache-struts-command-injection-vulnerability-cve-2016-3081","change":"Re-plated","field":"bucket","before":"On hold (status unknown)","after":"Order up (fix available)","reason":"Re-checked under updated rules: Apache Struts S2-032 (read 2 Nov 2026): \"Disable Dynamic Method Invocation when possible or upgrade to Apache Struts versions 2.3.20.3, 2.3.24.3 or 2.3.28.1.\"","source_url":"https://cwiki.apache.org/confluence/display/WW/S2-032","run":"Rules v30: every fix status quotes a vendor source or stays unknown; stack tags for 22 products"},{"at":"2026-11-03T16:18:27.814Z","id":"cpguard-linux-server-backdoor","title":"cPGuard: Linux server backdoor","url":"https://pwned.coffee/i/cpguard-linux-server-backdoor","change":"Fix withdrawn","field":"fix","before":"5.88.25 and later","after":"none","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html"},{"at":"2026-11-03T16:18:27.814Z","id":"cpguard-linux-server-backdoor","title":"cPGuard: Linux server backdoor","url":"https://pwned.coffee/i/cpguard-linux-server-backdoor","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T16:18:27.814Z","id":"cpguard-linux-server-backdoor","title":"cPGuard: Linux server backdoor","url":"https://pwned.coffee/i/cpguard-linux-server-backdoor","change":"Re-plated","field":"bucket","before":"Order up (fix available)","after":"On hold (status unknown)","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html"},{"at":"2026-11-03T16:18:27.516Z","id":"consul-k8s-authentication-bypass-cve-2026-110720","title":"Consul-k8s: authentication bypass","url":"https://pwned.coffee/i/consul-k8s-authentication-bypass-cve-2026-110720","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T16:18:27.516Z","id":"structure-remote-code-execution-cve-2026-117532","title":"Structure: remote code execution","url":"https://pwned.coffee/i/structure-remote-code-execution-cve-2026-117532","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T15:18:18.301Z","id":"btcpay-server-bitcoin-litecoin-theft","title":"BTCPay Server: Bitcoin/Litecoin theft","url":"https://pwned.coffee/i/btcpay-server-bitcoin-litecoin-theft","change":"Re-scored","field":"severity","before":"high","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T15:18:09.246Z","id":"ot-programming-tool-max-severity-bug","title":"OT programming tool: max-severity bug","url":"https://pwned.coffee/i/ot-programming-tool-max-severity-bug","change":"Source moved","field":"sources","before":"Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop","after":"dropped","reason":"The source doesn't mention CVE-2026-58115 or simatic drive controller","source_url":"https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/"},{"at":"2026-11-03T14:18:50.252Z","id":"monailabel-server-crash-and-silent-inference-corruption-cve-2026-48705","title":"MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)","url":"https://pwned.coffee/i/monailabel-server-crash-and-silent-inference-corruption-cve-2026-48705","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T13:19:34.995Z","id":"android-november-updates","title":"Android November updates","url":"https://pwned.coffee/i/android-november-updates","change":"Fix status lowered","field":"status","before":"patched","after":"fix status unknown","reason":"CVE record (CNA google_android) for CVE-2026-58868: Android 17 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58868"},{"at":"2026-11-03T13:19:34.995Z","id":"android-november-updates","title":"Android November updates","url":"https://pwned.coffee/i/android-november-updates","change":"Re-scored","field":"severity","before":"critical","after":"unknown","reason":"no CVSS score published","source_url":null},{"at":"2026-11-03T13:19:34.450Z","id":"microsoft-authenticator-android-app-vulnerability","title":"Microsoft Authenticator: Android app vulnerability","url":"https://pwned.coffee/i/microsoft-authenticator-android-app-vulnerability","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"},{"at":"2026-11-03T13:19:26.257Z","id":"gorbag-hackers-exploit-winrar-flaw","title":"Gorbag hackers exploit WinRAR flaw","url":"https://pwned.coffee/i/gorbag-hackers-exploit-winrar-flaw","change":"Off the board","field":"excluded","before":"on the board","after":"back to review","reason":"Unconfirmed: the second outlet was about another story, and one report (thehackernews.com) is not enough","source_url":"https://www.helpnetsecurity.com/2026/11/03/node-red-cve-2026-58115-exploitation/"},{"at":"2026-11-03T13:19:25.499Z","id":"gorbag-hackers-exploit-winrar-flaw","title":"Gorbag hackers exploit WinRAR flaw","url":"https://pwned.coffee/i/gorbag-hackers-exploit-winrar-flaw","change":"Source moved","field":"sources","before":"Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)","after":"moved to ot-programming-tool-max-severity-bug","reason":"The headline names CVE-2026-58115, not this incident","source_url":"https://www.helpnetsecurity.com/2026/11/03/node-red-cve-2026-58115-exploitation/"},{"at":"2026-11-03T13:19:22.122Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-98432","title":"Linux kernel: memory corruption","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-98432","change":"Source moved","field":"sources","before":"Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing","after":"dropped","reason":"The source doesn't mention CVE-2026-98432 or linux linux","source_url":"https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html"},{"at":"2026-11-03T12:18:44.003Z","id":"as-part-of-cisco-s-ongoing-commitment-to-proactive-secur-cve-2026-76473","title":"As part of Cisco's ongoing commitment to proactive security and product quality,…","url":"https://pwned.coffee/i/as-part-of-cisco-s-ongoing-commitment-to-proactive-secur-cve-2026-76473","change":"Off the board","field":"excluded","before":"on the board","after":"past orders","reason":"Patched, and no update since 2026-10-27: a fixed ticket leaves the board 7 days after its last update.","source_url":"https://pwned.coffee/past#leaving"}],"new_tickets":[{"at":"2026-11-04T07:17:34.029Z","id":"ibm-langflow-oss-1-0-0-remote-code-execution-cve-2026-110186","title":"IBM Langflow OSS 1.0.0: remote code execution","url":"https://pwned.coffee/i/ibm-langflow-oss-1-0-0-remote-code-execution-cve-2026-110186","status":"live","severity":"critical","exploitation":"none_known","kitchen":"On hold","source_url":"https://www.ibm.com/support/pages/node/7294467","first_seen":"2026-11-04T07:17:28.006Z"},{"at":"2026-11-04T06:17:34.129Z","id":"rails-21-security-issues","title":"Rails: 21 security issues","url":"https://pwned.coffee/i/rails-21-security-issues","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"Overheard","source_url":"https://seclists.org/oss-sec/2026/q4/509","first_seen":"2026-11-04T06:14:01.000Z"},{"at":"2026-11-04T00:17:05.108Z","id":"twig-php-code-injection-via-use-template-name-cve-2026-46633","title":"Twig: PHP code injection via `{% use %}` template name","url":"https://pwned.coffee/i/twig-php-code-injection-via-use-template-name-cve-2026-46633","status":"past","severity":"critical","exploitation":"none_known","kitchen":"On hold","source_url":"https://github.com/twigphp/Twig/security/advisories/GHSA-7p85-w9px-jpjp","first_seen":"2026-05-21T21:24:53Z","note":"first seen 2026-05-21, added to Past"},{"at":"2026-11-03T22:18:52.975Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","title":"Linux kernel: critical vulnerability","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","status":"past","severity":"critical","exploitation":"none_known","kitchen":"Order up","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80587","first_seen":"2026-11-03T22:18:46.060Z"},{"at":"2026-11-03T22:18:43.472Z","id":"apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","title":"Apache OpenOffice: local file inclusion via GStreamer","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/506","first_seen":"2026-11-03T22:00:59.000Z"},{"at":"2026-11-03T22:18:42.835Z","id":"apache-openoffice-remote-document-loading-cve-2026-90631","title":"Apache OpenOffice: remote document loading","url":"https://pwned.coffee/i/apache-openoffice-remote-document-loading-cve-2026-90631","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/505","first_seen":"2026-11-03T21:59:04.000Z"},{"at":"2026-11-03T22:18:42.188Z","id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/504","first_seen":"2026-11-03T21:57:13.000Z"},{"at":"2026-11-03T22:18:41.415Z","id":"apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/503","first_seen":"2026-11-03T21:55:11.000Z"},{"at":"2026-11-03T22:18:40.782Z","id":"apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/502","first_seen":"2026-11-03T21:53:20.000Z"},{"at":"2026-11-03T22:18:40.143Z","id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/501","first_seen":"2026-11-03T21:51:24.000Z"},{"at":"2026-11-03T22:18:03.603Z","id":"south-korean-presidential-office-data-leak-2","title":"South Korean Presidential Office: data leak","url":"https://pwned.coffee/i/south-korean-presidential-office-data-leak-2","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"Overheard","source_url":"https://databreaches.net/2026/11/03/kr-presidential-office-holds-emergency-meeting-over-leak-of-personal-data-of-president-trip-entourage/","first_seen":"2026-11-03T19:57:32.000Z"},{"at":"2026-11-03T21:18:07.961Z","id":"chrome-buffer-overflow-in-dawn-cve-2026-121156","title":"Chrome: buffer overflow in Dawn","url":"https://pwned.coffee/i/chrome-buffer-overflow-in-dawn-cve-2026-121156","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"Order up","source_url":"http://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","first_seen":"2026-11-03T20:38:18.791Z"},{"at":"2026-11-03T21:17:52.472Z","id":"openvox-rce-and-client-impersonation","title":"OpenVox: RCE and client impersonation","url":"https://pwned.coffee/i/openvox-rce-and-client-impersonation","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/489","first_seen":"2026-11-03T20:15:07.000Z"},{"at":"2026-11-03T21:17:52.134Z","id":"xsolis-data-breach","title":"Xsolis: data breach","url":"https://pwned.coffee/i/xsolis-data-breach","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"Overheard","source_url":"https://databreaches.net/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/","first_seen":"2026-11-03T20:02:54.000Z"},{"at":"2026-11-03T20:18:13.275Z","id":"apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","title":"Apache ZooKeeper: unbounded recursion via snapshot serialization","url":"https://pwned.coffee/i/apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/488","first_seen":"2026-11-03T20:07:28.000Z"},{"at":"2026-11-03T20:18:12.579Z","id":"apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","title":"Apache ZooKeeper: denial of service via multiRead","url":"https://pwned.coffee/i/apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/487","first_seen":"2026-11-03T20:05:35.000Z"},{"at":"2026-11-03T20:18:11.890Z","id":"apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","title":"Apache ZooKeeper: unauthenticated denial of service","url":"https://pwned.coffee/i/apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/486","first_seen":"2026-11-03T20:03:41.000Z"},{"at":"2026-11-03T20:18:11.197Z","id":"apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","title":"Apache ZooKeeper: SASL authorization bypass","url":"https://pwned.coffee/i/apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/485","first_seen":"2026-11-03T20:01:46.000Z"},{"at":"2026-11-03T20:18:09.454Z","id":"xen-arbitrary-read-write-via-grant-copy","title":"Xen: arbitrary read/write via grant copy","url":"https://pwned.coffee/i/xen-arbitrary-read-write-via-grant-copy","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/481","first_seen":"2026-11-03T19:53:45.000Z"},{"at":"2026-11-03T20:18:08.757Z","id":"apache-traffic-server-heap-buffer-overflow","title":"Apache Traffic Server: heap-buffer-overflow","url":"https://pwned.coffee/i/apache-traffic-server-heap-buffer-overflow","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://seclists.org/oss-sec/2026/q4/480","first_seen":"2026-11-03T19:51:47.000Z"},{"at":"2026-11-03T18:17:46.762Z","id":"elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","title":"Elo: sandbox escape to code execution","url":"https://pwned.coffee/i/elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","status":"live","severity":"critical","exploitation":"none_known","kitchen":"On hold","source_url":"https://github.com/enspirit/elo/security/advisories/GHSA-33r5-xmm8-v6x5","first_seen":"2026-11-03T17:53:42Z"},{"at":"2026-11-03T18:17:32.613Z","id":"flowise-has-unsandboxed-remote-code-execution-via-custom-cve-2025-71336","title":"Flowise has unsandboxed remote code execution via Custom MCP","url":"https://pwned.coffee/i/flowise-has-unsandboxed-remote-code-execution-via-custom-cve-2025-71336","status":"past","severity":"critical","exploitation":"poc_public","kitchen":"On hold","source_url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6933-jpx5-q87q","first_seen":"2025-09-15T20:30:30Z","note":"first seen 2025-09-15, added to Past"},{"at":"2026-11-03T18:17:31.236Z","id":"flowise-has-arbitrary-file-access-due-to-missing-chat-fl-cve-2025-71334","title":"Flowise has arbitrary file access due to missing chat flow id validation","url":"https://pwned.coffee/i/flowise-has-arbitrary-file-access-due-to-missing-chat-fl-cve-2025-71334","status":"past","severity":"critical","exploitation":"poc_public","kitchen":"On hold","source_url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-q67q-549q-p849","first_seen":"2025-09-15T20:11:39Z","note":"first seen 2025-09-15, added to Past"},{"at":"2026-11-03T18:17:22.072Z","id":"flowise-allows-arbitrary-file-write-to-rce-cve-2025-71338","title":"Flowise allows arbitrary file write to RCE","url":"https://pwned.coffee/i/flowise-allows-arbitrary-file-write-to-rce-cve-2025-71338","status":"past","severity":"critical","exploitation":"poc_public","kitchen":"On hold","source_url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8vvx-qvq9-5948","first_seen":"2025-03-14T18:48:44Z","note":"first seen 2025-03-14, added to Past"},{"at":"2026-11-03T17:17:29.530Z","id":"binance-6-43b-theft","title":"Binance $6.43B theft","url":"https://pwned.coffee/i/binance-6-43b-theft","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"Overheard","source_url":"https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html","first_seen":"2026-11-03T16:55:58.000Z"},{"at":"2026-11-03T17:17:29.320Z","id":"barracuda-auth-bypass-cmd-inj-cve-2026-116606","title":"Barracuda auth bypass & cmd inj","url":"https://pwned.coffee/i/barracuda-auth-bypass-cmd-inj-cve-2026-116606","status":"live","severity":"critical","exploitation":"none_known","kitchen":"On hold","source_url":"https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection","first_seen":"2026-11-03T15:59:19.000Z"},{"at":"2026-11-03T17:17:29.092Z","id":"subnet-powersystem-center-sqli","title":"Subnet PowerSYSTEM Center SQLi","url":"https://pwned.coffee/i/subnet-powersystem-center-sqli","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01","first_seen":"2026-11-03T12:00:00.000Z"},{"at":"2026-11-03T13:18:13.600Z","id":"android-november-updates","title":"Android November updates","url":"https://pwned.coffee/i/android-november-updates","status":"live","severity":"unknown","exploitation":"none_known","kitchen":"On hold","source_url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","first_seen":"2026-11-03T12:21:49.000Z"}],"status_changes":[{"at":"2026-11-04T06:18:08.488Z","id":"rails-21-security-issues","title":"Rails: 21 security issues","url":"https://pwned.coffee/i/rails-21-security-issues","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/509"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/502"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/503"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/504"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-remote-document-loading-cve-2026-90631","title":"Apache OpenOffice: remote document loading","url":"https://pwned.coffee/i/apache-openoffice-remote-document-loading-cve-2026-90631","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/505"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","title":"Apache OpenOffice: local file inclusion via GStreamer","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/506"},{"at":"2026-11-03T22:19:38.484Z","id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/501"},{"at":"2026-11-03T22:19:38.484Z","id":"in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","title":"Linux kernel: critical vulnerability","url":"https://pwned.coffee/i/in-the-linux-kernel-the-following-vulnerability-has-been-cve-2026-80587","change":"Fix status: unknown → patched","reason":"CVE record (CNA Linux) for CVE-2026-80587: Linux 7.2 and later unaffected (mainline: original commit for fix)","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80587"},{"at":"2026-11-03T21:18:28.699Z","id":"openvox-rce-and-client-impersonation","title":"OpenVox: RCE and client impersonation","url":"https://pwned.coffee/i/openvox-rce-and-client-impersonation","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/489"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-traffic-server-heap-buffer-overflow","title":"Apache Traffic Server: heap-buffer-overflow","url":"https://pwned.coffee/i/apache-traffic-server-heap-buffer-overflow","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/480"},{"at":"2026-11-03T20:19:05.089Z","id":"xen-arbitrary-read-write-via-grant-copy","title":"Xen: arbitrary read/write via grant copy","url":"https://pwned.coffee/i/xen-arbitrary-read-write-via-grant-copy","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/481"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","title":"Apache ZooKeeper: SASL authorization bypass","url":"https://pwned.coffee/i/apache-zookeeper-sasl-authorization-bypass-cve-2026-100252","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/485"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","title":"Apache ZooKeeper: unauthenticated denial of service","url":"https://pwned.coffee/i/apache-zookeeper-unauthenticated-denial-of-service-cve-2026-100300","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/486"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","title":"Apache ZooKeeper: denial of service via multiRead","url":"https://pwned.coffee/i/apache-zookeeper-denial-of-service-via-multiread-cve-2026-100302","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/487"},{"at":"2026-11-03T20:19:05.089Z","id":"apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","title":"Apache ZooKeeper: unbounded recursion via snapshot serialization","url":"https://pwned.coffee/i/apache-zookeeper-unbounded-recursion-via-snapshot-serial-cve-2026-115448","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/488"},{"at":"2026-11-03T18:18:46.173Z","id":"elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","title":"Elo: sandbox escape to code execution","url":"https://pwned.coffee/i/elo-javascript-emitter-has-sandbox-escape-to-arbitrary-n-cve-2026-44267","change":"Fix status: patched → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/advisories/GHSA-33r5-xmm8-v6x5"},{"at":"2026-11-03T17:17:47.136Z","id":"subnet-powersystem-center-sqli","title":"Subnet PowerSYSTEM Center SQLi","url":"https://pwned.coffee/i/subnet-powersystem-center-sqli","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01"},{"at":"2026-11-03T17:17:47.136Z","id":"barracuda-auth-bypass-cmd-inj-cve-2026-116606","title":"Barracuda auth bypass & cmd inj","url":"https://pwned.coffee/i/barracuda-auth-bypass-cmd-inj-cve-2026-116606","change":"Fix status: no fix yet → unknown","reason":"Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://thehackernews.com/2026/11/barracuda-flaws-could-be-chained-to.html"},{"at":"2026-11-03T16:37:57.964Z","id":"spreadsheet-xlsx-code-exec-cve-2026-115943","title":"Spreadsheet::XLSX: code exec","url":"https://pwned.coffee/i/spreadsheet-xlsx-code-exec-cve-2026-115943","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/439"},{"at":"2026-11-03T16:37:57.964Z","id":"xs-libbrotli-out-of-bounds-write-cve-2026-115946","title":"XS::libbrotli: out-of-bounds write","url":"https://pwned.coffee/i/xs-libbrotli-out-of-bounds-write-cve-2026-115946","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/460"},{"at":"2026-11-03T16:37:57.964Z","id":"http-session-memcached-cmd-inj-cve-2026-13575","title":"HTTP::Session: memcached cmd inj","url":"https://pwned.coffee/i/http-session-memcached-cmd-inj-cve-2026-13575","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/461"},{"at":"2026-11-03T16:37:57.964Z","id":"gpac-mp4box-buffer-overflow-cve-2025-60475","title":"GPAC/MP4Box: buffer overflow","url":"https://pwned.coffee/i/gpac-mp4box-buffer-overflow-cve-2025-60475","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/409"},{"at":"2026-11-03T16:37:57.964Z","id":"gnu-mtools-out-of-bounds-write-cve-2026-118384","title":"GNU mtools: out-of-bounds write","url":"https://pwned.coffee/i/gnu-mtools-out-of-bounds-write-cve-2026-118384","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://seclists.org/oss-sec/2026/q4/455"},{"at":"2026-11-03T16:37:57.964Z","id":"lean-4-kernel-soundness-bug-cve-2026-72844","title":"leanprover lean4: vulnerability (public PoC)","url":"https://pwned.coffee/i/lean-4-kernel-soundness-bug-cve-2026-72844","change":"Fix status: partial fix → unknown","reason":"Re-checked under updated rules: CVE record (CNA VulnCheck) for CVE-2026-72844: lean4 4.33.0-rc1 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72844"},{"at":"2026-11-03T16:37:57.964Z","id":"rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","title":"Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability…","url":"https://pwned.coffee/i/rapyd-admin-from-9-0-0-before-9-20-0-contains-a-hard-cod-cve-2026-109566","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/zofe/rapyd-admin"},{"at":"2026-11-03T16:37:57.964Z","id":"the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","title":"Unknown Checkout Files Upload for WooCommerce: remote code execution","url":"https://pwned.coffee/i/the-checkout-files-upload-for-woocommerce-wordpress-plug-cve-2026-103688","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103688"},{"at":"2026-11-03T16:37:57.964Z","id":"openstack-manila-critical-vulnerability-cve-2026-71195","title":"OpenStack Manila: critical vulnerability","url":"https://pwned.coffee/i/openstack-manila-critical-vulnerability-cve-2026-71195","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://launchpad.net/bugs/2161412"},{"at":"2026-11-03T16:37:57.964Z","id":"zip-critical-parser-differential-security-control-bypass-cve-2026-115905","title":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","url":"https://pwned.coffee/i/zip-critical-parser-differential-security-control-bypass-cve-2026-115905","change":"Fix status: patched → unknown","reason":"Re-checked under updated rules: Fix status unknown: no stored vendor quote names a fix or says there is none","source_url":"https://github.com/advisories/GHSA-m665-v7pm-7grj"},{"at":"2026-11-03T16:37:57.964Z","id":"authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","title":"Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability.","url":"https://pwned.coffee/i/authlib-v1-7-2-and-below-contains-a-signature-verificati-cve-2026-96760","change":"Fix status: partial fix → unknown","reason":"Re-checked under updated rules: CVE record (CNA certcc) for CVE-2026-96760: Authlib 1.7.2 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96760"},{"at":"2026-11-03T16:37:57.964Z","id":"broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","title":"Broadcom VMWare ESX Insufficient Logging Vulnerability","url":"https://pwned.coffee/i/broadcom-vmware-esx-insufficient-logging-vulnerability-cve-2026-41709","change":"Fix status: partial fix → patched","reason":"Re-checked under updated rules: Broadcom's response matrix for CVE-2026-41709 (read 2 Nov 2026): fixed builds for ESX 9.1, 9.0 and 8.0, 5.2.4 for Cloud Foundation 5.x, and KB449886 for Telco Cloud Platform 5.0 and 5.1.","source_url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"},{"at":"2026-11-03T16:37:57.964Z","id":"apache-struts-command-injection-vulnerability-cve-2016-3081","title":"Apache Struts Command Injection Vulnerability","url":"https://pwned.coffee/i/apache-struts-command-injection-vulnerability-cve-2016-3081","change":"Fix status: unknown → patched","reason":"Re-checked under updated rules: Apache Struts S2-032 (read 2 Nov 2026): \"Disable Dynamic Method Invocation when possible or upgrade to Apache Struts versions 2.3.20.3, 2.3.24.3 or 2.3.28.1.\"","source_url":"https://cwiki.apache.org/confluence/display/WW/S2-032"},{"at":"2026-11-03T13:19:34.995Z","id":"android-november-updates","title":"Android November updates","url":"https://pwned.coffee/i/android-november-updates","change":"Fix status: patched → unknown","reason":"CVE record (CNA google_android) for CVE-2026-58868: Android 17 affected","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58868"}],"next_since":"2026-11-04T07:17:34.029Z"}