Signals

NVD · CVE-2026-70618 · 4.3 · Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership bNVD · CVE-2026-70617 · 8.1 · Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary groupNVD · CVE-2026-70616 · 6.5 · boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, gorouNVD · CVE-2026-70615 · 9.9 · boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject aCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 9.8 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-70618 · 4.3 · Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership bNVD · CVE-2026-70617 · 8.1 · Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary groupNVD · CVE-2026-70616 · 6.5 · boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, gorouNVD · CVE-2026-70615 · 9.9 · boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject aCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 9.8 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07

ClaimedMedium

alexander-dennis.com

Manufacturing · US · blackbasta

All intelligence content is fictional, redacted and defensive. No real credentials, stolen data, exploit instructions, malware links, payment information or private personal data is published. Derived from public data-leak-site monitoring. Presented for defensive awareness only; unverified attacker claims.

Public preview

Public summary and status visible. Pro+ adds detailed defensive context and analysis.

Plans →

Public Summary

Actions

View pricing →

Full Summary

Alexander Dennis is a British bus manufacturing company based in Larbert, Scotland. The largest bus and coach manufacturer in the United Kingdom with a 50% market share in 2019, it has manufacturing plants and partnerships in Canada, China, Europe, Hong Kong, Malaysia, New Zealand, Singapore, South Africa and the United States.SITE: www.alexander-dennis.com Address : 9 Central Central Park Blvd, Larbert, Stirlingshire, FK5 4RU, United KingdomALL DATA SIZE: 507gb 1. Group data 2. HR 3. Finance 4. Legal 5. Engineering 6. Departments and etc…

Status

Claimed

Impact

Medium

Sector

Manufacturing

Country