{"vulnerability": "cve-2026-6309", "sightings": [{"uuid": "3761dd9b-da0e-4141-a7c4-92b10d5af089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjksyyppyb2m", "content": "", "creation_timestamp": "2026-04-15T21:17:26.899703Z"}, {"uuid": "4b6de1ee-d085-4ee8-a46b-3fdf200a62bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "1671d820-599b-47be-81ce-51b5edd082f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjne4jl23g2q", "content": "", "creation_timestamp": "2026-04-16T21:29:06.641108Z"}, {"uuid": "ad1435a2-4054-4307-a7ed-582a8b7b2628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjpodjyxf52v", "content": "", "creation_timestamp": "2026-04-17T19:37:08.412156Z"}, {"uuid": "93a44a80-0fc3-42b8-a412-916715af8bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "68ffbaa9-f41c-43c1-a75b-556c74135e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6309", "type": "published-proof-of-concept", "source": "Telegram/0zmBng2ph0j5-h51LqidOz9H-G3O8PUZqZfxER_d38YEET8", "content": "", "creation_timestamp": "2026-04-15T23:26:54.000000Z"}, {"uuid": "285fa4ae-285f-4fe9-beee-4fc854c1cfe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6309", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "78e575d3-0210-4b28-b88e-5094569c59dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mqu272jdvo24", "content": "A malicious code project can run an attacker's program on your Windows PC the moment you open it in Cursor, the AI code editor. No clicks.\n\nIt hides a fake copy of Git that Cursor runs automatically. Unpatched (CVE-2026-63093).\n\nOpen unknown repos only in a sandbox.", "creation_timestamp": "2026-07-17T15:16:22.875325Z"}, {"uuid": "229e92a2-8c3f-4832-af38-b4f92b1741f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x", "content": "CVE-2026-63093 - Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace\nCVE ID : CVE-2026-63093\n \n Published : July 17, 2026, 3:16 p.m. | 21\u00a0minutes ago\n \n Description : Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote att...", "creation_timestamp": "2026-07-17T18:39:45.762249Z"}, {"uuid": "642f91d7-0884-46e2-84b8-08501beae337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquftzdovb2a", "content": "CVE-2026-63094 - SigNoz 0.133.0 SSO OAuth State Manipulation Session Token Theft\nCVE ID : CVE-2026-63094\n \n Published : July 17, 2026, 3:16 p.m. | 21\u00a0minutes ago\n \n Description : SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that...", "creation_timestamp": "2026-07-17T18:44:57.107291Z"}, {"uuid": "7d231a08-5409-4294-aaee-261470b969bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjj6cfxm2w", "content": "\ud83d\udfe0 CVE-2026-63093 - High (8.8)\n\nCursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63093/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T10:01:08.342080Z"}, {"uuid": "0a1b972d-7c1a-4c20-8ed9-1c6956d537d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjjfhw2h2a", "content": "\ud83d\udfe0 CVE-2026-63094 - High (8.1)\n\nSigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63094/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T10:01:15.664912Z"}, {"uuid": "a88bbe5d-45fc-4331-8ed5-df730b029808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2rowxc2u", "content": "\ud83d\udfe0 CVE-2026-63090 - High (8.8)\n\nProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63090/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:32.455933Z"}, {"uuid": "a80e04c5-4009-483e-b5ec-fe1e82f5d8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vujr4dm2a", "content": "CVE-2026-63090 - ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly\nCVE ID : CVE-2026-63090\n \n Published : July 20, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability i...", "creation_timestamp": "2026-07-20T18:20:12.348341Z"}, {"uuid": "7dd1aafa-dbb7-430e-9d4a-84bcb3926399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4wm5kcto2j", "content": "CVE-2026-63090\nAuthenticated attackers can exploit this flaw to execute malicious code on ProFTPD servers. This is particularly concerning because the attack only requires low-privilege access. To mitigate this risk, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T04:06:04.802272Z"}, {"uuid": "cb088570-1806-4d17-95b0-54d29ef3d87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mr55nrpmia2o", "content": "ProFTPD Turns One Weak Login Into a Full-Scale Server Autopsy\nPANIC 72% | Lag 0.0h | CVE-2026-63090 lets authenticated attackers execute code on ProFTPD servers through the mod_sftp mod\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-21T06:12:15.950077Z"}, {"uuid": "bf19cbf6-a647-4324-a75a-fbb5f835dd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7zqbi3kk2i", "content": "CVE-2026-63090 - proftpd-dfsg\nDebian's OpenSSL package has a flaw that can cause it to generate weak keys, potentially allowing attackers to compromise secure connections. This affects systems\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#proftpddfsg #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-22T09:40:03.562761Z"}]}