EUVD-2026-36722

Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0...

CVE-2026-9278

creationtimestamp| type| source ---|---|--- 2026-06-15 12:02:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modageeszb23...

CVE-2026-47835

creationtimestamp| type| source ---|---|--- 2026-06-15 12:00:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3modacykoeu2o 2026-06-15 20:09:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ofsskn2x 2026-07-13 11:07:06+00:00| seen|...

webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced

A flaw was found in WebKitGTK. Processing malicious web content may prevent Content Security Policy from being enforced due to a validation issue with improper logic...

CVE-2026-49757

AshAuthentication (versions before 4.14.0 and before 5.0.0-rc.10) is vulnerable to an authentication bypass where OAuth2/OIDC sign-in matches local users by email rather than the issuer/sub identity. An attacker able to provide a victim’s email to an OAuth provider could be signed in to the victi...

CVE-2026-12223

creationtimestamp| type| source ---|---|--- 2026-06-15 08:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocukowlju2p 2026-07-23 12:11:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsoohd7i2j...

webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced

A flaw was found in WebKitGTK. Processing malicious web content may prevent Content Security Policy from being enforced due to improper input validation...

CVE-2026-49781

creationtimestamp| type| source ---|---|--- 2026-06-15 05:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocjqov2dg2u 2026-06-15 21:14:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7cnqii524 2026-06-16 03:00:46+00:00| seen|...

CVE-2026-5482

creationtimestamp| type| source ---|---|--- 2026-06-15 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-5482 2026-06-15 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754364893455307 2026-06-15 13:30:28+00:00| seen|...

CVE-2026-12206

creationtimestamp| type| source ---|---|--- 2026-06-15 04:17:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocghjmip427...

CVE-2026-12217

A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been...

CVE-2026-12198

creationtimestamp| type| source ---|---|--- 2026-06-15 04:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocfvmpkk627...

CVE-2026-11774

creationtimestamp| type| source ---|---|--- 2026-06-15 03:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocc5w2sez26...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

gimp: GIMP: Remote Code Execution via PSP file parsing

A flaw was found in GIMP. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted PSP PaintShop Pro file. This flaw is caused by a heap-based buffer overflow, where the application does not properly validate the length of user-supplied data. Successful...

CVE-2026-12197

creationtimestamp| type| source ---|---|--- 2026-06-15 01:23:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moc4pxr3u32b 2026-06-15 01:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moc54pa4u62l 2026-06-15 01:30:27+00:00| seen|...

CVE-2026-12192

creationtimestamp| type| source ---|---|--- 2026-06-15 01:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3gsau3s22 2026-06-15 01:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moc4gzc3iz2b 2026-06-15 03:00:28+00:00| seen|...

CVE-2026-12197

A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the component JSON-RPC Diagnose Endpoint. Performing a manipulation of the argument params.target results in command injection. It is possible to...

CVE-2026-12188

creationtimestamp| type| source ---|---|--- 2026-06-15 00:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobyspc63j2o...

RHEL 9 : webkit2gtk3 (RHSA-2026:25927)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25927 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously...