CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

CVE-2026-66395

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after...

CVE-2026-48342

creationtimestamp| type| source ---|---|--- 2026-07-27 03:50:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyj2kfki2u 2026-07-27 03:50:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyj4krkw2l...

CVE-2026-49853

creationtimestamp| type| source ---|---|--- 2026-07-27 03:48:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlygqfg4q2n 2026-07-27 03:48:48+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlygsjvxg2m...

CVE-2020-15136

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen| https://gist.github.com/tu-trinh-scale/2134fa4233992263562231dfecbd2046 2026-07-27 00:52:06+00:00| seen|...

PT-2026-65249

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description Websites may be ab...

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

CVE-2026-15720

creationtimestamp| type| source ---|---|--- 2026-07-26 17:00:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkuaa2g722a 2026-07-26 17:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkual4n5s2j...

CVE-2016-9223

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:50+00:00| seen| https://t.me/KaitNews/8589 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1813 2026-07-27 00:01:34+00:00| seen| https://t.me/KaitNews/8589 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1813 2026-07-29...

CVE-2026-63720

creationtimestamp| type| source ---|---|--- 2026-07-26 05:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrjpcezbyb2c 2026-07-26 06:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116984750038327145 2026-07-26 06:00:27+00:00| seen|...

CVE-2026-12503

creationtimestamp| type| source ---|---|--- 2026-07-25 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116980149564747478 2026-07-25 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrhnx74zdg2r...

AZL-93935 CVE-2026-64375 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

CVE-2026-64375

In CVE-2026-64375, the Linux kernel fix addresses a race in ptrace access checks. Previously proc_pid_get_link() and proc_pid_readlink() looked up the task from the pid twice (before and after the check). The patch passes the task to the ->proc_get_link() handler and adds call_proc_get_link() ...

CVE-2026-64317

CVE-2026-64317 affects the Linux kernel isofs Rock Ridge SL handling. A crafted Rock Ridge SL record can declare a component length that runs past the SL record, causing an out-of-bounds read of up to 255 bytes during parsing in get_symlink_chunk() and parse_rock_ridge_inode_internal(). This can ...

JLSEC-2026-792 Hugo: Certain markdown links are not properly escaped

Impact Links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affected. Patches Patched in v0.159.2 Workarounds Create custom render hooks for links and images in...

PT-2026-64642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the media entity remove link function during the removal of the imx8 isi module. The issue occurs because the mxc isi remove function invokes mxc is...

GHSA-CMWH-G2H8-C222 Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover

Preface Poweradmin maps OIDC identities into local users through oidcuserlinks.oidcsubject plus providerid. In the MySQL schema, the OIDC link table explicitly uses utf8mb4unicodeci, which is case-insensitive and accent-insensitive. OIDC sub is a stable external subject identifier and should be...