CVE-2026-46982

VULNERABILITY SUMMARY: CVE-2026-46982 affects Oracle Retail Integration Bus (RIB Kernel) in Oracle Retail Applications, version 14.1.3.2. The issue allows unauthenticated, network-accessible attackers over HTTP to compromise the RIB and potentially take over the system. CVSS v3.1 base score is 9....

CVE-2026-46968

...

CVE-2026-46975

...

CVE-2026-46948

...

CVE-2026-46936

...

CVE-2026-46941

...

CVE-2026-46936

...

CVE-2026-46924

CVE-2026-46924 affects Oracle Application Testing Suite (ATS) 13.3.0.1. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise ATS, enabling takeover with high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8 (CRITICAL)...

CVE-2026-46917

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM...

CVE-2026-21954

...

CVE-2026-21953

...

CVE-2026-63764

creationtimestamp| type| source ---|---|--- 2026-07-21 21:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pppwq5x2v 2026-07-21 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6snqvcbe2j 2026-07-21 23:23:25+00:00| seen|...

CVE-2026-64879

creationtimestamp| type| source ---|---|--- 2026-07-21 21:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pm2rbos24 2026-07-21 23:32:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xsbr2z722 2026-08-13 08:46:00+00:00| seen|...

GHSA-5GGR-2F2H-JMVM Gitea: Local File Inclusion via file:// URI in Migration Restore

Local File Inclusion via file:// URI in Migration Restore Target: go-gitea/gitea Component: services/migrations/giteauploader.go, modules/uri/uri.go Severity: High Affected Versions: = v1.22.x all releases, master as of latest commit Researchers: - Isa Can — Eresus Security...

CVE-2026-16394

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p2bgfsq2q 2026-07-22 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-23 05:37:06+00:00| see...

CVE-2026-63092 kirby-modules License Key Disclosure via modules/activate Dialog

kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authenticated Kirby Panel user to retrieve the full plaintext commercial license key by sending a GET request to the modules/activate dialog endpoint. The plugin's activate dialo...

Gitea: REST API exposes organization membership of private organizations to public

Summary The endpoint "/orgs/org/publicmembers/username" + GET exposes organization membership of public members in a private organization. PoC 1. Spin up the nightly container of Gitea. 2. Perform the default installation. 3. Register a new user let's call this user "user1". 4. Create a new...

EUVD-2026-41604

Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service...

GHSA-8Q5V-6PQQ-X66H vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap, powershell, promitor, dotnet-sdk...

CVE-2026-16317

The flaw affects s2n-tls (TLS 1.3) where the outer content_type byte is not covered by the AEAD tag because it is hardcoded in AAD instead of using the wire byte. This allows an active MITM to silently discard individual application_data records without detection, enabling selective suppression o...