CLEANSTART-2026-GU73214 Security fixes in fluent-operator-fips 3.1.0-r3

Package fluent-operator-fips version 3.1.0-r3 fixes 1 vulnerabilities: CVE-2025-47907...

CLEANSTART-2026-IX23233 Security fixes in harbor-registry-fips 3.0.0.1-r3

Package harbor-registry-fips version 3.0.0.1-r3 fixes 1 vulnerabilities: CVE-2025-29923...

CLEANSTART-2026-MS74348 Security fixes in kube-vip 1.0.4-r1

Package kube-vip version 1.0.4-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-AG15773 Security fixes in apache-hive 4.2.0-r4

Package apache-hive version 4.2.0-r4 fixes 2 vulnerabilities: CVE-2026-45205, CVE-2026-45300...

CLEANSTART-2026-VE32460 Security fixes in wave 0.10.0-r1

Package wave version 0.10.0-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CVE-2026-49865

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/95796 2026-07-30 10:00:02+00:00| seen| Telegram/A5dzmxNNpgXG6imsEkmIRw7rqHzvuUDwkzq5yMgxpcxN0a0 2026-07-30 14:00:04+00:00| seen| Telegram/47AGWfAWFIwZKzQclsisfXazYjpo74QYaHVlY-riLjwoTE 2026-07-...

CVE-2026-47858

creationtimestamp| type| source ---|---|--- 2026-07-30 06:51:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4pmcheqhxq63y 2026-07-30 16:15:06+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759 2026-08-20 03:00:04+00:00|...

CVE-2026-44098 OS Command Injection in OCPP Agent via charge_box_id

This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution of arbitrary commands as the limited user charx-oa. Charging could be interrupted...

CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CVE-2026-13395 Bookly < 27.8 - Unauthenticated SQL Injection via staff_id

The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...

CVE-2026-13395

The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...

CVE-2026-18018

creationtimestamp| type| source ---|---|--- 2026-07-30 05:46:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 12:15:05+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-18004

creationtimestamp| type| source ---|---|--- 2026-07-30 05:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 11:02:13+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-66397

creationtimestamp| type| source ---|---|--- 2026-07-30 04:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i...

CVE-2026-16339

creationtimestamp| type| source ---|---|--- 2026-07-30 00:51:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5pemnuz3idiia...

EUVD-2025-210534

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

EUVD-2025-210541

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2026-17741

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17674

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...