SUSE CVE-2026-64088

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative ttbufflen batadvorignode::ttbufflen was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative signed integer. I...

SUSE CVE-2026-64089

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative lastchangesetlen batadvpivtt::lastchangesetlen len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative...

SUSE CVE-2026-64130

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: fix initialization of tags of the huge zero folio with initonfree GFPZEROTAGS semantics are currently a bit weird, but effectively this flag is only ever set alongside GFPZERO and GFPSKIPKASAN. If we run with...

CVE-2026-62415 Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

CVE-2026-62415

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

CVE-2026-62415

Affected software: Joomla extension Membership Pro (Joomla) prior to version 4.6.2. Issue: default configuration allowed unauthenticated users to upload media assets, enabling potential unauthorized media uploads. No further details on impact, exploit, or fixes are provided in the supplied docume...

Amazon Corretto Java 17.x < 17.0.20.8.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 17 prior to 17.0.20.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2026-Jul-21 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

EulerOS Virtualization 2.12.0 : bind (EulerOS-SA-2026-2768)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

PT-2026-62225

Name of the Vulnerable Software and Affected Versions Netty versions 4.1.0.Final through 4.1.134 Netty versions 4.2.0.Final through 4.2.15 Description The HAProxyMessageDecoder in the codec-haproxy module performs protocol version detection by reading the 13th byte as a signed Java byte and...

GHSA-9HW9-CH79-4VH6 Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Summary Pillow's public ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. For example, a transform built as RGBA - RGBA can be applied to an L output...

EUVD-2026-42311

protobufjs: Text Format string map parsing can mutate returned map object prototype...

CVE-2026-55219

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show.php executes a pessimistic row lock lockForUpdate outside of an active database transaction. Because MySQL/MariaDB...

CVE-2026-53593

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads Helper::$restrictedextensions is incomplete: it does not cover the .pht extension. The authenticated upload endpoint POST /uploads/uplo...

CVE-2026-53593

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads Helper::$restrictedextensions is incomplete: it does not cover the .pht extension. The authenticated upload endpoint POST /uploads/uplo...

CVE-2026-53593 FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads Helper::$restrictedextensions is incomplete: it does not cover the .pht extension. The authenticated upload endpoint POST /uploads/uplo...

CVE-2026-53593

FreeScout prior to 1.8.224 is vulnerable to authenticated remote code execution due to an incomplete denylist for dangerous upload extensions. The upload endpoint POST /uploads/upload stores files with their original extension in storage/app/public/uploads/ and serves them at /storage/uploads/. O...

CVE-2026-61901

Joomla Extension - hikashop.com - Open redirect in Hikashop 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect...

CVE-2026-60034

Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS...

CVE-2026-60026

Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution. Authenticated builder user core.create/core.edit could inject PHP tags in element content, that got...

MGASA-2026-0278 Updated sqlite3 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: SQLite before 3.53.2 Memory Corruption in FTS5 Extension. CVE-2026-11822 SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate. CVE-2026-11824...