CVE-2026-55793

creationtimestamp| type| source ---|---|--- 2026-07-02 14:29:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaley52l2b 2026-07-06 22:35:07+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-xrqc-p465-2xvg 2026-07-07 01:42:10+00:00|...

CVE-2026-54262

creationtimestamp| type| source ---|---|--- 2026-07-02 14:28:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaj35qfl27 2026-07-03 13:26:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnk6jp5n2c...

CVE-2026-54260

creationtimestamp| type| source ---|---|--- 2026-07-02 14:26:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoafqta2k2q 2026-07-03 13:26:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnj7hxnt2y...

CVE-2026-36911

creationtimestamp| type| source ---|---|--- 2026-07-02 14:23:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaauvk6h2r 2026-07-03 09:22:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7vrw7en2m...

CVE-2026-36910

creationtimestamp| type| source ---|---|--- 2026-07-02 14:20:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoa425kkt2d 2026-07-03 09:22:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7v6adfc2j...

CVE-2026-13251

creationtimestamp| type| source ---|---|--- 2026-07-02 14:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpo7rpkclv27 2026-07-02 22:22:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2yymfoc2o 2026-07-02 22:22:22+00:00| seen|...

PYSEC-2026-659 mailman Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...

Uncontrolled Resource Consumption in Matrix Synapse

ImpactSynapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after maxspidersize default: 10M bytes have been downloaded, which can in some cases lead t...

PYSEC-2026-632 Cross-site scripting vulnerability in TinyMCE plugins

Impact A cross-site scripting XSS vulnerability was discovered in the URL processing logic of the image and link plugins. The vulnerability allowed arbitrary JavaScript execution when updating an image or link using a specially crafted URL. This issue only impacted users while editing and the...

Cross-site scripting vulnerability in TinyMCE plugins

ImpactA cross-site scripting XSS vulnerability was discovered in the URL processing logic of the image and link plugins. The vulnerability allowed arbitrary JavaScript execution when updating an image or link using a specially crafted URL. This issue only impacted users while editing and the...

Temporary urls leaked via logging

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected...

Open Redirect vulnerability in jupyterhub and notebook

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.8 and some browsers Chrome, Firefox in JupyterHub before 0.9.6 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a baseurl prefix are not affecte...

Moderate severity vulnerability that affects mailman

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site...

PYSEC-2026-647 Open Redirect vulnerability in jupyterhub and notebook

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.8 and some browsers Chrome, Firefox in JupyterHub before 0.9.6 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a baseurl prefix are not affecte...

CVE-2026-49089

creationtimestamp| type| source ---|---|--- 2026-07-02 13:50:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t...

CVE-2026-55660

creationtimestamp| type| source ---|---|--- 2026-07-02 13:02:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo3q2aivn2y...

CVE-2026-55153

creationtimestamp| type| source ---|---|--- 2026-07-02 13:02:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo3pr6yat2b 2026-07-03 12:03:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqivdiljs2f...

CVE-2026-54720

creationtimestamp| type| source ---|---|--- 2026-07-02 12:50:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33b5zs52o 2026-08-28 02:33:08+00:00| seen| https://gist.github.com/alon710/6538c11be757e60d0a7d8025d09bf775...

CVE-2026-57756

creationtimestamp| type| source ---|---|--- 2026-07-02 12:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpo2s3yhfe2n 2026-07-03 00:48:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppd64vm2326 2026-07-03 03:52:41+00:00| seen|...

CVE-2026-57746

creationtimestamp| type| source ---|---|--- 2026-07-02 12:35:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpo2a73gfi2m 2026-07-03 00:45:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppczgt75s2y 2026-07-03 14:13:33+00:00| seen|...