CVE-2026-60119 Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection

Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaScript by embedding a malicious event title containing the sequence, which is not escaped by JSON.stringify when...

CVE-2026-12707

CVE-2026-12707 affects Cloudflare quiche. After QUIC handshakes, an attacker can trigger unbounded queuing of PathEvent::ReusedSourceConnectionId during rapid source address migration, causing memory resource exhaustion. Affected component is quiche’s PathEvents collection (path_event_next() drai...

CVE-2026-12707 Unbounded path event queue growth in quiche via peer-driven source connection ID rotation

Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of post-handshake client migration events. Impact quiche supports the connection migration features described in Section 9 of RFC 9000, which allows a single QUIC connection to survive...

CVE-2026-62422

creationtimestamp| type| source ---|---|--- 2026-07-14 10:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqlzlfbgoz2d 2026-07-14 11:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5bcqjlj27 2026-07-15 13:03:28+00:00| seen|...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2914-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2914-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53995:...

PYSEC-2026-2992 pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager

Description: The EventManager module in pyload manages a list of Client instances for subscribing to events. The addition of each unique uuid from the getevents API causes the creation of a Client instance that gets appended to the clients list. Although there is a clean method available in the...

PYSEC-2026-2583 LangSmith SDK: Streaming token events bypass output redaction

Summary The LangSmith SDK's output redaction controls hideOutputs in JS, hideoutputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline...

SUSE-SU-2026:2914-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype bsc1259891. - CVE-2026-23451:...

CVE-2026-60121

creationtimestamp| type| source ---|---|--- 2026-07-13 14:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjuqfucef2t 2026-07-13 14:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjw774vlk2l 2026-07-13 15:40:19+00:00| seen|...

CVE-2021-38135

creationtimestamp| type| source ---|---|--- 2026-07-13 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqjsrulk6w2k 2026-07-13 13:37:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mqjsrvmvf22t...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...

CVE-2026-57713

Deserialization of Untrusted Data vulnerability in Marcus aka @msykes Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through = 7.3.6...

CVE-2026-15574

creationtimestamp| type| source ---|---|--- 2026-07-13 09:50:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjg4qea2f2i 2026-07-13 09:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjg4wv44l2k 2026-07-14 01:10:43+00:00| seen|...

EUVD-2026-43285

The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without...

CVE-2026-14453

creationtimestamp| type| source ---|---|--- 2026-07-13 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911848014654725 2026-07-13 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqjddarg6f2f 2026-07-13 09:08:06+00:00| seen|...

CVE-2026-57713 WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Marcus aka @msykes Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through = 7.3.6...

CVE-2026-57713

CVE-2026-57713 : The WordPress Plugins Events Manager (events-manager ) is affected up to version 7.3.6. The issue is a PHP Object Injection caused by deserialization of untrusted data, enabling object injection. The affected component is the Events Manager plugin for WordPress; root cause is des...

CVE-2026-15522

creationtimestamp| type| source ---|---|--- 2026-07-13 03:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqseevj52c 2026-07-13 03:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiqz75lmn2x 2026-07-13 21:03:37+00:00| seen|...

CVE-2019-6160

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:19+00:00| seen| https://t.me/pleyadesit/4210 2026-07-13 00:00:42+00:00| seen| https://t.me/pleyadesit/4210 2026-07-14 00:00:43+00:00| seen| https://t.me/pleyadesit/4210...

CVE-2020-6109

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6631 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6631 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6631...