Windows Event Logging Service Information Disclosure Vulnerability

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network...

CVE-2026-15678

creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...

CVE-2026-15626

creationtimestamp| type| source ---|---|--- 2026-07-14 05:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljkqzsov2w 2026-07-19 20:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmib3x532j...

CVE-2026-45196

creationtimestamp| type| source ---|---|--- 2026-07-14 04:14:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldrwg3wj26 2026-07-16 08:22:17+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqslpaf742y...

CVE-2026-15622

creationtimestamp| type| source ---|---|--- 2026-07-14 01:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql32izw6q2t 2026-07-19 20:29:16+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzmmfr4ff2y...

CVE-2026-15557

creationtimestamp| type| source ---|---|--- 2026-07-14 01:15:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzsyepf42x...

GHSA-XF7X-X43H-RPQH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:11:57+00:00| seen| https://gist.github.com/alon710/b44757b6afa3477e3470b6c4803062d7...

GHSA-GW94-85M2-X8V2

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3258 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3258...

CVE-2026-56099

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3260 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3260...

PT-2026-58925

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.82, deeply nested $or, $and, and $nor query condition operators in the REST API or LiveQuery query handling could trigger exponential-time processing in the internal...

PT-2026-58117

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A protection mechanism failure in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information over a network. Specifically, the system recorded the fu...

KLA91153 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-58476

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description Insufficient granularity of access control in the Windows Event Logging Service allows an authorized attacker to execute arbitrary code over a network. Recommendations A...

CVE-2026-52658

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92563 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92563 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92563...

GHSA-C2H5-PPV9-7VRQ

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:03+00:00| seen| https://t.me/GithubRedTeam/93198 2026-07-14 01:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93198 2026-07-16 19:00:08+00:00| seen| Telegram/iICdo6JkqLQcGiJzEUOva0XUBnrNpqjKkG8FagtyyTeeKdc 2026-07-1...

CVE-2026-57797

creationtimestamp| type| source ---|---|--- 2026-07-13 19:49:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhl2ahsu2c 2026-07-16 08:09:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrukxm732n...

PYSEC-2026-2992 pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager

Description: The EventManager module in pyload manages a list of Client instances for subscribing to events. The addition of each unique uuid from the getevents API causes the creation of a Client instance that gets appended to the clients list. Although there is a clean method available in the...

PYSEC-2026-2722 Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar

Summary POST /api/v1/calendars/events/eventid/update validates that the caller has write access to the calendar the event currently belongs to, but does not validate the destination calendarid supplied in the request body. The model layer then persists the new calendarid unconditionally. A regula...

PYSEC-2026-2403 Bugsink: DOS using large numbers of event tags

Summary In affected versions, Bugsink stores every tag supplied with an incoming event. An event with an unusually large number of custom i.e. supplied by an attacker tags can therefore make ingestion spend more time than intended writing tag rows. Bugsink uses a single-writer database...