PT-2026-63080

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

PT-2026-63283

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A privilege escalation issue exists in the API endpoint POST /users/username/tokens used for creating Personal Access Tokens. The endpoint is protected by the reqBasicOrRevProxyAuth middleware,...

HPESBNW05013 rev.1 - HPE Aruba Networking EdgeConnect SD-WAN Gateways, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Deletion, Creation and Deletion of Arbitrary Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking EdgeConnect SD-WAN Please refer to the Affected Products section for a complete list of product software impact...

CVE-2026-64624

creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fjxsamp2e 2026-07-21 00:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4j5mytxx2e...

GHSA-G446-98W2-8P5W

creationtimestamp| type| source ---|---|--- 2026-07-20 22:31:01+00:00| seen| https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771...

CVE-2026-53594

creationtimestamp| type| source ---|---|--- 2026-07-20 22:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cjglmhe2s...

CVE-2026-47130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cfts2ly27...

CVE-2026-44584

creationtimestamp| type| source ---|---|--- 2026-07-20 22:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cci3qkg23...

GHSA-3JXR-9VMJ-R5CP

creationtimestamp| type| source ---|---|--- 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794...

CVE-2026-58624

creationtimestamp| type| source ---|---|--- 2026-07-20 21:25:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr4a743w7m25 2026-07-20 22:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eyfbiel2e...

GHSA-5X94-69RX-G8H2 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Description PIL/FontFile.py FontFile.compile assembles per-glyph images into a single combined bitmap using Image.new"1", xsize, ysize without calling Image.decompressionbombcheck. This is the base-class method shared by both BdfFontFile and PcfFontFile, and it is triggered whenever a loaded font...

CVE-2021-24967

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:06+00:00| seen| https://t.me/crackvaultde/1054 2026-07-21 00:00:18+00:00| seen| https://t.me/crackvaultde/1054 2026-07-22 01:00:17+00:00| published-proof-of-concept| https://t.me/crackvaultde/1054...

GHSA-499R-G7PC-VMP9

creationtimestamp| type| source ---|---|--- 2026-07-20 20:32:00+00:00| seen| https://gist.github.com/alon710/4520df6a85d072915e787e3825f8e5ef...

CVE-2025-40945

creationtimestamp| type| source ---|---|--- 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr4564uojn2r 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr4564mkvd2s...

CVE-2026-44585

CVE-2026-44585 affects Paymenter prior to v1.5.0. The ticket creation endpoint validates ownership of a user-supplied service identifier is not enforced, enabling an authenticated user to create tickets that reference another user’s service. Impact stated: no direct access to service contents or ...

CVE-2026-44585 Paymenter: Broken object level authorization via service reference manipulation on ticket creation

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

CVE-2026-44585 Paymenter: Broken object level authorization via service reference manipulation on ticket creation

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

CVE-2026-63108

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43i5ubog2q 2026-07-20 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bbgq76c2i...

CVE-2026-61424

creationtimestamp| type| source ---|---|--- 2026-07-20 19:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42vbmbff2u 2026-07-20 21:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4agkeocy2q...

CVE-2026-60032

creationtimestamp| type| source ---|---|--- 2026-07-20 19:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42rp2faa23 2026-07-20 21:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46shkvtn23...