MINI-V9JW-6F7H-MQV5

Bulletin has no description...

MINI-5GG7-5QJ6-26X4

Bulletin has no description...

MINI-29X3-MXC3-5V9F

Bulletin has no description...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux, flux-source-controller...

GHSA-RM43-82J9-R4MJ

creationtimestamp| type| source ---|---|--- 2026-08-13 15:33:17+00:00| seen| https://gist.github.com/alon710/d62f1422f9dac4c6a1fc5e9b8b380828...

GHSA-X692-Q9X7-8C3F

creationtimestamp| type| source ---|---|--- 2026-08-12 19:00:03+00:00| seen| https://t.me/GithubRedTeam/97769 2026-08-13 00:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97769 2026-08-15 08:00:06+00:00| seen| Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM 2026-08-1...

MINI-H4G7-647R-G76C

Bulletin has no description...

CGA-7H9F-9CJ5-242V

Bulletin has no description...

CVE-2026-70375

HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability CWE-78 in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js executes AppService.execgit checkout $this.branch || 'master', interpolating the configured branch value directly into...

CLEANSTART-2026-AB32653 Security fixes in istio 1.28.5-r0

Package istio version 1.28.5-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CVE-2026-13800

An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500108770...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-60268

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 05:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrm4ssvmzg2y...

CVE-2026-60937

...

CVE-2026-60651

CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...

CVE-2026-60556

...

RLSA-2026:39771 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-10103 Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing...

ALSA-2026:36541 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43074 kernel: net: mana: Fix double destroyworkqueue on service rescan PCI path CVE-2026-43276 kernel: net/ipv6: ioam6:...

CVE-2026-59709 Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check

Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-only access grantees to modify portfolio holding tags. Attackers with valid read-only share tokens can assign or remove...