CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 poc win10 21h2 19044.1620 win11 21h2 22000.593 Informazioni di base sulla compilazione Versione Windows SDK: 10.0 versione più recente installata Set di strumenti della piattaforma: Visual Studio 2022 v143 Standard del linguaggio C++: predefinito standard ISO C++14...

CLSA-2026-1787928056 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.1.21-tuxcare.11...

SUSE SLES12: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2026:3793-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3793-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...

CVE-2026-34491

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1...

EUVD-2026-65005

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1...

CVE-2026-34491

A persistent cross-site scripting (XSS) vulnerability in the web interface of Johnson Controls Metasys (a building management system) allows a low-privilege user to inject a malicious payload via a crafted URL. The payload persists across logins and executes in the browser context of other users,...

postgresql14-14.24-1.1 on GA media (moderate)

postgresql14-14.24-1.1 on GA media Announcement ID: openSUSE-SU-2026:11552-1 Rating: moderate Cross-References: CVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14673 CVE-2026-14677 CVE-2026-14678 CVE-2026-14679...

BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

OPENSUSE-SU-2026:11552-1 postgresql14-14.24-1.1 on GA media

These are all security issues fixed in the postgresql14-14.24-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-48528

creationtimestamp| type| source ---|---|--- 2026-08-14 19:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt2ucpfdae2e...

CVE-2026-73408

creationtimestamp| type| source ---|---|--- 2026-08-14 03:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msz66iyibm2b...

CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

Description of the security update for Office Online Server: July 14, 2026 (KB5002884)

None None...

CVE-2026-70637

creationtimestamp| type| source ---|---|--- 2026-08-06 16:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dfebd4n6mb6sx...

macOS 14.x < 14.8.9 (148172)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.9. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

CVE-2026-58080

creationtimestamp| type| source ---|---|--- 2026-08-04 14:00:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/da6t4qlq3pqql 2026-08-06 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msftw3zzfs22...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-67309

creationtimestamp| type| source ---|---|--- 2026-08-02 14:46:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms47yxells24 2026-08-06 18:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rxv-jg7p-wvg3 2026-08-06 19:32:23+00:00| seen|...

CVE-2026-18536

creationtimestamp| type| source ---|---|--- 2026-08-01 14:31:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3j3jbe6z3bfgg 2026-08-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2dcdmekf24 2026-08-01 20:40:58+00:00| seen|...

CVE-2026-67354

creationtimestamp| type| source ---|---|--- 2026-08-01 14:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/imvkpkdsiyvnu 2026-08-01 22:25:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2j6cxcjo2l 2026-08-01 22:25:42+00:00| seen|...