CVE-2026-65438: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Message Filter for Contact Form 7 = 1.6.3.9 versions...

fleet-cve-scanner v1.1.0

fleet-cve-scanner An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7, no agents, no appliances, no license fees. It answers one question for every piece of software on every endpoint you manage: is the installed version known to be vulnerable, and how urgent is it...

ROS-20260724-73-0038

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

simplewall v.3.9.1

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

Oracle Linux 7 : samba (ELSA-2026-28132)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-28132 advisory. - Fix CVE-2026-4408 and CVE-2026-4480 Orabug: 39599120 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2026-57216 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57216 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57217 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57217 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57220 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57220 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57215 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57215 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57211 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57211 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57213 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57213 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-57218 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57218 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

OPENSUSE-SU-2026:21415-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write bsc1269892...

simplewall v.3.9

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

CVE-2025-13146: Improper Control of Generation of Code

The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

CVE-2026-65058 Trezor Safe improper security check in on-device display

Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum signtx / signtxeip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata...

Malicious Package

Overview 7-0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-65058: Improperly Implemented Security Check for Standard

Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum signtx / signtxeip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata...

CVE-2026-35198

HeyForm (open-source form builder) is affected by a stored XSS vulnerability present before version 3.0.0-rc.7. A low-privileged team member can inject malicious JavaScript that executes when a team owner views the form, enabling complete account takeover through privilege escalation. A fix is av...