CVE-2026-73149

A flaw was found in svxlink's NetRx component. An unvalidated MsgAudio length field allows a remote attacker to trigger an out-of-bounds read beyond buffer boundaries, potentially leading to information disclosure or a crash. Mitigation Update svxlink to version 26.05.1 or later...

CVE-2026-73143

A flaw was found in svxlink's RtlTcp component. A malformed rtltcp greeting from a remote source triggers an unconditional exit1 call, causing the entire svxlink daemon to terminate. A remote attacker can exploit this to achieve a complete denial of service of the repeater controller. Mitigation...

CGA-98WM-P8HW-RH39

Bulletin has no description...

MINI-CPG4-7PRG-HM8J

Bulletin has no description...

MINI-XJH9-2MG7-V4FH

Bulletin has no description...

MINI-RWC4-JWHQ-72W8

Bulletin has no description...

MINI-JJ7V-Q5WR-PF7J

Bulletin has no description...

CVE-2025-30238

creationtimestamp| type| source ---|---|--- 2026-08-11 00:19:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4scc4ve5wkbvr...

EUVD-2026-55876

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application...

CVE-2026-58235

CVE-2026-58235 affects SAP NetWeaver Application Server Java (Adobe Document Service). The issue arises from use of outdated third-party cryptographic and data transfer libraries that have known weaknesses and were addressed in later versions. A low-privileged authenticated attacker could potenti...

PT-2026-70922

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.137 Description A use-after-free issue exists in the HTML component, which allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML pag...

PT-2026-70501

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Imaging Component. This issue allows the attacke...

Apache Tomcat 9.0.13 < 9.0.117 Insertion of Sensitive Information Vulnerability

The version of Tomcat installed on the remote host is 9.0.13 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering...

Linux Distros Unpatched Vulnerability : CVE-2026-68372

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to...

PT-2026-70391

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Imaging Component during the parsing of ICC files. This out-of-bounds write allows an unauthorized attacker to execute code locall...

CVE-2026-48161

creationtimestamp| type| source ---|---|--- 2026-08-10 23:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msran7w43c2v 2026-08-11 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117073932098519347 2026-08-11 00:00:37+00:00| seen|...

CVE-2026-72911

creationtimestamp| type| source ---|---|--- 2026-08-10 21:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqzwphlo425 2026-08-10 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr3y6rwf324...

ECHO-0EA6-1C68-A084

Bulletin has no description...

CVE-2026-72743

SQLBot 1.10.0 contains a stored XSS in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. If an attacker can modify the dashboard text widget, they can inject arbitrary HTML/JavaScript that executes for all dashboard viewers. The issue is fixed in commit c...

CVE-2026-72743

SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...