PT-2026-54105

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the Enterprise component allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page...

RHEL 8 : ruby:2.5 (RHSA-2026:33514)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33514 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Linux Distros Unpatched Vulnerability : CVE-2026-11998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution...

Dell Peripheral Manager permissions and access control vulnerabilities

Dell Peripheral Manager is a peripheral device management software developed by the American company Dell. There are security vulnerabilities in Dell Peripheral Manager. Attackers can exploit these vulnerabilities to execute arbitrary code by preloading malicious executable files...

PT-2026-54184

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description An inappropriate implementation in iOSWeb allows a remote attacker to perform UI spoofing via a crafted HTML page, provided they can convince a user to perform specific UI...

PT-2026-54258

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Incorrect security UI in the Passwords component allows a remote attacker who has compromised the renderer process to perform UI spoofing using a crafted HTML page. UI spoofing is a...

PT-2026-54263

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Incorrect security UI implementation allows a remote attacker to perform UI spoofing via a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-54116

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in CSS allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from one...

Security update for atril (important)

openSUSE security update: security update for atril ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21152-1 Rating: important References: bsc1265880 Cross-References: CVE-2026-46519 Affected Products: openSUSE Leap 16.0...

CVE-2026-7656

creationtimestamp| type| source ---|---|--- 2026-06-29 23:57:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphowclzrx2y 2026-06-30 00:01:40+00:00| seen| https://gist.github.com/ichintu/8b78df900d5aca0afc4dd97225bd83dc 2026-06-30 01:15:37+00:00| seen|...

CVE-2026-43663

creationtimestamp| type| source ---|---|--- 2026-06-29 23:41:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnzlvy332q 2026-06-30 21:18:11+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3mpjwienisy2d 2026-07-01 02:51:13+00:00| seen|...

GHSA-Q2M9-6JP9-C6MC Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

Summary The checkUserPassword GraphQL query in Dgraph is vulnerable to DQL Dgraph Query Language injection. User-supplied password values are interpolated directly into a DQL checkpwd query via fmt.Sprintf without any escaping or parameterization. An attacker can inject a password containing a...

CVE-2026-43743

creationtimestamp| type| source ---|---|--- 2026-06-29 22:19:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjgmo4ok25 2026-07-01 02:50:35+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...

CVE-2026-57997

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS512 tokens alongside HS256. Attackers possessing the jwtSecret can mint tokens with non-standard HMAC variants to bypass...

CVE-2026-53404

creationtimestamp| type| source ---|---|--- 2026-06-29 22:15:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjaa6jki2d 2026-06-29 23:23:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmzpmaux2o 2026-06-29 23:31:20+00:00| seen|...

CVE-2026-13757

creationtimestamp| type| source ---|---|--- 2026-06-29 21:58:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphibxmbru2b 2026-07-11 17:28:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqf6ryg7t42s 2026-07-13 07:00:02+00:00| seen|...

CVE-2026-12672

creationtimestamp| type| source ---|---|--- 2026-06-29 20:25:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphd3qywhk22...

GHSA-9GGV-8W38-R7PM vulnerabilities

Vulnerabilities for packages: redisinsight...

CVE-2026-37637

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component...

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...