PT-2026-47079

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting functions. An attacker may inject crafted format strings into event subscription requests or notification generation pa...

7-Zip buffer error vulnerability

7-Zip is an open-source compression software developed by 7-Zip. Versions 9.34 to 26.00 of 7-Zip contain a buffer error vulnerability. This vulnerability stems from improper handling of WIM archive processors’ security descriptor lookups, leading to out-of-bounds read attacks, which may result in...

Decompress security vulnerabilities

Decompress is a file decompression tool personally developed by Kevin Mårtensson. Decompress has a security vulnerability; this vulnerability arises when decompressing a ZIP archive that contains two entries with the same path. Due to issues with the order of micro-task processing, arbitrary file...

PT-2026-47078

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifiers into ONVIF scope parameters to manipulate memory...

CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-65640

creationtimestamp| type| source ---|---|--- 2026-06-04 22:52:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipmla46y2x 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187928 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187926 2026-09-02 01:00:21+00:0...

binary-exploitation-labs-Application-security-ctf-writeups

binary-exploitation-labs-Application-security-ctf-writeups...

com.github.tommyettinger:tantrum-digital (0.9.2.15), com.github.tommyettinger:tantrum-jdkgdxds (1.12.3.15) +7 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.12.2)

org.apache.fory:fory-core MAVEN version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital 0.9.2.15 - com.github.tommyettinger:tantrum-jdkgdxds 1.12.3.15 -...

io.quarkiverse.fory:quarkus-fory (0.5.0), io.quarkiverse.fory:quarkus-fory-deployment (0.5.0) +9 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.13.2)

org.apache.fory:fory-core MAVEN version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - io.quarkiverse.fory:quarkus-fory 0.5.0 - io.quarkiverse.fory:quarkus-fory-deployment 0.5.0 -...

com.github.tommyettinger:tantrum-digital (>=0.9.7.19, <=0.9.8.19), com.github.tommyettinger:tantrum-jdkgdxds (>=1.13.1.19, <=1.14.0.19) +10 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.14.0)

org.apache.fory:fory-core MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital =0.9.7.19, =1.13.1.19, =0.1.19.19, =1.5.5, =1.6.0 Source cves:...

CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

CGA-8W86-HCP7-HR4X

Bulletin has no description...

RLSA-2026:20606 Important: ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible. Security Fixes: ruby/json: Ruby JSON: Denial of Service or Informatio...

ruby4.0 security update

An update is available for ruby4.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is the interpreted scripting language for quick and easy object-oriente...

SUSE CVE-2022-46280

A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

SUSE CVE-2022-46291

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to...

CVE-2026-50211: Use of Externally-Controlled Format String

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers...

PT-2026-46197

Name of the Vulnerable Software and Affected Versions ad manager wd version 1.0.11 Description An arbitrary file download issue allows unauthenticated attackers to retrieve sensitive files from the web server. By sending GET requests to the 'edit.php' endpoint with the export parameter set to...

Moderate: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: InnoDB unspecified vulnerability CPU Apr 2026 CVE-2026-22004 mysql: Information Schema unspecified vulnerability CPU Apr 2026...