The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to execute arbitrary code by allowing the operation to escape out of the buffer in memory.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

python311-zeroconf-0.149.16-1.1 on GA media (moderate)

python311-zeroconf-0.149.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11036-1 Rating: moderate Cross-References: CVE-2026-48487 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-39949

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-48713

creationtimestamp| type| source ---|---|--- 2026-06-15 23:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7r5k4a24 2026-06-16 00:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeimat47y2n 2026-06-16 03:00:27+00:00| seen|...

CVE-2026-52700

creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...

CVE-2026-49769

creationtimestamp| type| source ---|---|--- 2026-06-15 21:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeaw2yext2a 2026-06-15 22:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moecq7qnpw26 2026-06-16 06:00:43+00:00| seen|...

EUVD-2026-36992

Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...

EUVD-2026-36953

Unauthenticated Cross Site Scripting XSS in Paid Member Subscriptions = 2.17.3 versions...

EUVD-2026-36958

Unauthenticated Broken Access Control in Booking Activities = 1.16.48.1 versions...

EUVD-2026-36776

An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2026-47825

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x fix 3.1.13. Spring Cloud Gateway 4.1.x fix 4.1.13. Spri...

CVE-2026-42650

Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...

CVE-2026-39434

Shop manager PHP Object Injection in CTX Feed = 6.6.26 versions...

CVE-2026-53705

creationtimestamp| type| source ---|---|--- 2026-06-15 20:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4gpjlgt2w...

CVE-2026-42668 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend = 1.18.0 versions...

CVE-2026-42660 WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Contest Gallery = 28.1.7 versions...

CVE-2026-42656

CVE-2026-42656 affects the WordPress Contest Gallery plugin

CVE-2026-40793 WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Groundhogg 4.4.1 versions...

CVE-2026-53703

creationtimestamp| type| source ---|---|--- 2026-06-15 20:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe45dozpw2j...

CVE-2026-54295

creationtimestamp| type| source ---|---|--- 2026-06-15 20:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3cpxdpf2b 2026-07-31 18:35:23+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-fg7f-2386-8897...