Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

CHIYU TCP/IP Converter - Cross-Site Scripting

CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...

CVE-2026-16796

creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...

GHSA-J6G5-3HH3-PGW8

creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...

GHSA-8R6M-32JQ-JX6Q vulnerabilities

Vulnerabilities for packages: tileserver-gl...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-72GW-FMMR-C4R4 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-4VJ7-5MJ6-JM8M vulnerabilities

Vulnerabilities for packages: tileserver-gl...

GHSA-3PJW-73GF-8QR5 vulnerabilities

Vulnerabilities for packages: flyway...

GHSA-JPCW-4WR7-C3VQ

creationtimestamp| type| source ---|---|--- 2026-07-25 01:39:15+00:00| seen| https://gist.github.com/alon710/b490d29b6d050fb00e7a5ccf95bdfcac...

GHSA-8Q49-2H5H-434X

creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...

SUSE CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

CVE-2026-58662

creationtimestamp| type| source ---|---|--- 2026-07-25 00:08:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgl7nigny2g 2026-07-26 05:02:38+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n...

Linux Distros Unpatched Vulnerability : CVE-2026-16394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16394 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-16409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16409 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-64399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via...

Linux Distros Unpatched Vulnerability : CVE-2026-64394

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 ksmbd: fix FSCTL permission bypass by adding a permission check for...

Linux Distros Unpatched Vulnerability : CVE-2026-16395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16395 Note that Nessus relies on the...