GO-2026-5934 netfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil

netfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil...

GO-2026-5968 melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko

melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko...

DEBIAN-CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

CVE-2026-49852

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...

GHSA-8RQH-VXPR-X77P plone.restapi: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

plone.restapi: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

CVE-2026-47870

creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:18+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 12:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7rnnoqs23...

CVE-2026-47869

creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2xjjh42f 2026-07-18 12:16:36+00:00| seen|...

CVE-2026-47868

creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:09+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2qynrv2w 2026-07-18 12:11:35+00:00| seen|...

CVE-2026-47866

creationtimestamp| type| source ---|---|--- 2026-07-17 16:03:47+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i 2026-07-17 16:15:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:00:35+00:00| seen|...

CVE-2026-15343 Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

GHSA-36HH-V3QG-5JQ4 vulnerabilities

Vulnerabilities for packages: py3-xet-core...

GHSA-5G35-5JRJ-F39P vulnerabilities

Vulnerabilities for packages: perl...

GHSA-PH5F-PJVP-H9X6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MC7H-7X47-9J48 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F3VQ-GJQX-3PG9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-25XW-CF43-5CCV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CHGR-C6PX-7XPP vulnerabilities

Vulnerabilities for packages: py3-xet-core...

GHSA-FF9G-85JQ-R3G3

creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317 2026-07-18 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317...