EUVD-2026-39976

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject keyboard and mouse input and reach the unguarded...

Linux Distros Unpatched Vulnerability : CVE-2026-53164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/dma: Do not try to iommumap a 0 length region in swiotlb iommudmaiovalinkswiotlb processes a mapping that is unaligned in three parts, the head, middle an...

Linux Distros Unpatched Vulnerability : CVE-2026-53218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlled priv-len to nftparseregisterstore, which marks that many byte...

BELL-CVE-2026-45383

Bulletin has no description...

Exploit for CVE-2026-5366

CVE-2026-5366 P...

CVE-2026-11987

creationtimestamp| type| source ---|---|--- 2026-06-27 10:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbgoer5r2u 2026-06-27 18:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpc2vzsbn72i 2026-06-27 18:16:07+00:00| seen|...

Vim: Out-of-bounds Read in Text Property Count

...

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

...

CVE-2026-13333

creationtimestamp| type| source ---|---|--- 2026-06-27 06:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpat3naxtl2b 2026-06-27 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpbgsco3gf2p 2026-06-29 19:22:59+00:00| seen|...

BELL-CVE-2026-53132

Bulletin has no description...

CVE-2026-9677

The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariffinfourl setting before outputting it in the frontend HTML via the generateshariff function, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...

CVE-2025-60465

creationtimestamp| type| source ---|---|--- 2026-06-27 03:12:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaigmvxot2a...

GHSA-R2JR-M2RH-F5HG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, trivy-operator, kyverno, slsa-verifier, teleport, trivy, crossplane, zot, policy-controller, aactl, kyverno-notation-aws...

EUVD-2026-39927

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or...

External Control of File Name or Path

Overview @pnpm/installing.deps-resolver is a Resolves dependency graph of a package Affected versions of this package are vulnerable to External Control of File Name or Path via the lockfile alias handling process. An attacker can overwrite files or directories outside the intended nodemodules...

wayland security, bug fix, and enhancement update

An update is available for wayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Wayland is a protocol for a compositor to talk to its clients, as well as a C...

RLSA-2023:2786 Moderate: wayland security, bug fix, and enhancement update

Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...

EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2475)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2515)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...