CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString XS.xs inspects the previous token's last byte to choose between a regexp literal and a...

CVE-2026-53427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leandrocp MDEx allows stored or reflected cross-site scripting via attacker-controlled Markdown. When syntax highlighting and full info-string forwarding render: fullinfostring: true are enabled, t...

CVE-2026-40061

creationtimestamp| type| source ---|---|--- 2026-06-29 18:17:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3wfdcyj2d...

CVE-2026-13751

creationtimestamp| type| source ---|---|--- 2026-06-29 17:54:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2nxm6hf2t 2026-06-29 18:43:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5feg6v52o 2026-06-29 20:15:46+00:00| seen|...

CVE-2026-13582

creationtimestamp| type| source ---|---|--- 2026-06-29 17:32:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzgdp5gw2o 2026-06-29 20:32:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphdi2rf6h23 2026-06-29 22:14:12+00:00| seen|...

EUVD-2026-40157

Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection parameter of the share view records endpoint. Attackers can enumerate hidden field IDs from shar...

CVE-2026-9105

creationtimestamp| type| source ---|---|--- 2026-06-29 16:58:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxjndka52y 2026-06-29 17:52:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2k7spaz2n 2026-06-29 19:59:22+00:00| seen|...

CVE-2026-13746

creationtimestamp| type| source ---|---|--- 2026-06-29 16:56:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxflto7g23...

CVE-2026-13587

creationtimestamp| type| source ---|---|--- 2026-06-29 16:54:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxckvvnk2t 2026-06-29 20:31:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphdf4kxb723...

CVE-2026-13590 seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack...

CVE-2026-57338

creationtimestamp| type| source ---|---|--- 2026-06-29 16:28:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvu2ehen2y 2026-06-29 16:58:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxivlydm2t 2026-06-29 20:43:13+00:00| seen|...

CVE-2026-13752

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session...

CVE-2026-55607

creationtimestamp| type| source ---|---|--- 2026-06-29 16:10:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgusuta6d2b...

CVE-2026-49860

creationtimestamp| type| source ---|---|--- 2026-06-29 16:07:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguopfyi62y...

EUVD-2026-40133

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An attacker could exploit this by supplying crafted repository or project content that referenced files outside the intended...

CVE-2026-13437

CVE-2026-13437 affects Devolutions PowerShell Universal 2026.2.0. An attacker with AI Agent read access can exploit the AI Agent job API to receive App Tokens serialized in plaintext within API responses, enabling retrieval of reusable authentication tokens with potential higher privilege. The un...

CVE-2026-47735

creationtimestamp| type| source ---|---|--- 2026-06-29 14:41:58+00:00| seen| https://bsky.app/profile/nachovdk.bsky.social/post/3mpgpuvxvpc22...

CVE-2026-36908

creationtimestamp| type| source ---|---|--- 2026-06-29 14:41:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpu2rr3h2e 2026-06-29 21:49:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhr4l2n22k...

CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step...

CVE-2026-46817

creationtimestamp| type| source ---|---|--- 2026-06-29 13:46:37+00:00| seen| https://bsky.app/profile/bleepingcomputer.com/post/3mpgmrwrd2525 2026-06-29 14:01:32+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpgnmnxscm2c 2026-06-29 14:03:49+00:00| seen|...