IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

EUVD-2026-49062

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...

CVE-2026-17500

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function visitpattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance...

EUVD-2026-49061

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes allocation of resources. The attack may be initiated remotely. The pull...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-64530

creationtimestamp| type| source ---|---|--- 2026-07-26 17:42:00+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987508848390063...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325...

CVE-2026-57989

CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...

CVE-2026-57978 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57978

CVE-2026-57978 describes an origin validation error in Microsoft Edge (Chromium-based) that could enable an attacker to perform spoofing over a network. The entry’s metrics show a CVSS v3.1 base score of 5.4 (Medium) , with attack vector Network , required user interaction, and no availability im...

CVE-2026-64522

creationtimestamp| type| source ---|---|--- 2026-07-26 17:15:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987404024660419...

CVE-2026-17497

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtqq7or2l 2026-07-26 16:11:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrimr3t32u 2026-07-26 18:07:21+00:00| seen|...

CVE-2026-17496

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtkdipa23 2026-07-26 16:10:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrg43gaz2y 2026-07-26 17:00:19+00:00| seen|...

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

CVE-2026-17496 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...

CVE-2026-17458

creationtimestamp| type| source ---|---|--- 2026-07-26 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116986165685626877 2026-07-26 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrkdgz7ndm2i 2026-07-26 17:27:08+00:00| seen|...

CVE-2026-17459

creationtimestamp| type| source ---|---|--- 2026-07-26 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116985811828078268 2026-07-26 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrk6g3xnyj2n 2026-07-26 17:25:36+00:00| seen|...