CVE-2026-61246

CVE-2026-61246 affects Oracle Platform Security for Java (Oracle Fusion Middleware) - Centralized Thirdparty Jars. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access and can lead to takeover of Oracle Platform Security for Java. Affected versions are 12.2....

CVE-2026-60439

...

CVE-2026-60372

CVE-2026-60372 concerns the Oracle Platform Security for Java component of Oracle Fusion Middleware, specifically the Centralized Thirdparty Jars. Affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise...

CVE-2026-60373

...

CVE-2026-60370

CVE-2026-60370 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to ...

CVE-2026-60369

CVE-2026-60369 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can compromise the affected product, with pote...

CVE-2026-60367

...

CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...

CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-15043 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-38754 affecting package busybox for versions less than 1.36.1-25

CVE-2026-38754 affecting package busybox for versions less than 1.36.1-25. A patched version of the package is available...

CVE-2026-64793

creationtimestamp| type| source ---|---|--- 2026-07-22 22:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdbiaqay2a...

n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution

Impact When an n8n instance is configured with more than one trusted token-exchange issuer, external identities are resolved to local accounts using only the JWT sub claim, ignoring the issuer iss. As a result, two different issuers that emit the same subject value map to the same local account. ...

EUVD-2026-42613

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression...

Netty: STOMP CONNECT Frame Header Injection in Netty

Security Vulnerability Report: STOMP CONNECT Frame Header Injection in Netty 1. Vulnerability Summary | Field | Value | |-------|-------| | Product | Netty | | Version | 4.2.12.Final and all prior versions with codec-stomp | | Component | io.netty.handler.codec.stomp.StompSubframeEncoder | |...

CVE-2026-64798

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy...

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

CVE-2026-14881

creationtimestamp| type| source ---|---|--- 2026-07-22 20:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7ilrmpy2q 2026-07-22 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7qnhc6z2f 2026-07-24 04:46:08+00:00| seen|...

CVE-2026-13072

creationtimestamp| type| source ---|---|--- 2026-07-22 20:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb77namiq27 2026-07-22 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7r2ehvw2g 2026-07-24 04:45:50+00:00| seen|...

CVE-2026-64796

Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags,...

GO-2026-6025 File Browser: Share API exposes the password hash and bypass token in github.com/filebrowser/filebrowser

File Browser: Share API exposes the password hash and bypass token in github.com/filebrowser/filebrowser...