CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-65640

creationtimestamp| type| source ---|---|--- 2026-06-04 22:52:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipmla46y2x 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187928 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187926 2026-09-02 01:00:21+00:0...

binary-exploitation-labs-Application-security-ctf-writeups

binary-exploitation-labs-Application-security-ctf-writeups...

com.github.tommyettinger:tantrum-digital (0.9.2.15), com.github.tommyettinger:tantrum-jdkgdxds (1.12.3.15) +7 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.12.2)

org.apache.fory:fory-core MAVEN version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital 0.9.2.15 - com.github.tommyettinger:tantrum-jdkgdxds 1.12.3.15 -...

io.quarkiverse.fory:quarkus-fory (0.5.0), io.quarkiverse.fory:quarkus-fory-deployment (0.5.0) +9 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.13.2)

org.apache.fory:fory-core MAVEN version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - io.quarkiverse.fory:quarkus-fory 0.5.0 - io.quarkiverse.fory:quarkus-fory-deployment 0.5.0 -...

com.github.tommyettinger:tantrum-digital (>=0.9.7.19, <=0.9.8.19), com.github.tommyettinger:tantrum-jdkgdxds (>=1.13.1.19, <=1.14.0.19) +10 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.14.0)

org.apache.fory:fory-core MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital =0.9.7.19, =1.13.1.19, =0.1.19.19, =1.5.5, =1.6.0 Source cves:...

CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

CGA-8W86-HCP7-HR4X

Bulletin has no description...

RLSA-2026:20606 Important: ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible. Security Fixes: ruby/json: Ruby JSON: Denial of Service or Informatio...

ruby4.0 security update

An update is available for ruby4.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is the interpreted scripting language for quick and easy object-oriente...

SUSE CVE-2022-46280

A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

SUSE CVE-2022-46291

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to...

PT-2026-46197

Name of the Vulnerable Software and Affected Versions ad manager wd version 1.0.11 Description An arbitrary file download issue allows unauthenticated attackers to retrieve sensitive files from the web server. By sending GET requests to the 'edit.php' endpoint with the export parameter set to...

CVE-2026-50211: Use of Externally-Controlled Format String

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers...

Moderate: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: InnoDB unspecified vulnerability CPU Apr 2026 CVE-2026-22004 mysql: Information Schema unspecified vulnerability CPU Apr 2026...

DEBIAN-CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

Improper Output Neutralization for Logs

Overview org.webjars.npm:morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the :remote-user token, which extracts the Basic auth username from the Authorization header and writes it to the log...

EUVD-2026-34178

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in readMSAT is not fully initialized before being consumed by ole2validatesectorchain, which may result in application crashe...

CVE-2021-4478 Dräger CC-Vision Basic and CC-Vision E-Cal Out-of-Bounds Write via Malicious GDT File

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...