EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-2602)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...

CVE-2026-15000

creationtimestamp| type| source ---|---|--- 2026-07-09 22:33:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaouyr2752e...

PYSEC-2026-2413 OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

USN-8523-1 libsoup2.4 vulnerabilities

Eric Su and Samuel Dainard discovered that libsoup incorrectly handled content with zero-length resources. An attacker could possibly use this issue to trigger a buffer over-read, resulting in information disclosure or a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04...

CVE-2026-47828

During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...

CVE-2026-8651

Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer HTTPS module. This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3...

CVE-2026-8651

Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer HTTPS module. This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3...

EUVD-2026-42381

Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer HTTPS module. This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3...

MAL-2026-7000 Malicious code in pipo-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259159c0505b819905dcaf53172d98a4fd590a9ae1a40f87d2be4c1a7fdc4065 This package is a dependency-confusion payload published at an abnormally high version 9999.0.0 targeting an internal package name pipo-sdk. The...

CVE-2026-14739

creationtimestamp| type| source ---|---|--- 2026-07-08 00:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3uqppnkw2i 2026-07-08 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5ccbcr3u2b 2026-07-09 09:42:04+00:00| seen|...

CVE-2026-55436: Improper Certificate Validation

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy aibridgeproxyd created a goproxy server whose default transport set InsecureSkipVerify: true and only assigned a...

CVE-2026-8651: Authentication Bypass by Spoofing

Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer HTTPS module. This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3...

PYSEC-2026-2011 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...

[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

ImpactAPIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. ReferencesISSUEPATCH...

MiracleLinux 9 : libsoup-2.72.0-16.el9_8.1 (AXSA:2026-1210:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1210:11 advisory. libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment CVE-2026-5119 Tenable has extracted the...

CVE-2025-50492

creationtimestamp| type| source ---|---|--- 2026-07-06 06:08:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxggl6bz52i...

CVE-2025-71343

creationtimestamp| type| source ---|---|--- 2026-07-04 04:16:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mps7arpltr27 2026-07-04 06:14:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpsfunjwiy2x 2026-07-04 15:01:15+00:00| seen|...

CVE-2026-57765

creationtimestamp| type| source ---|---|--- 2026-07-02 12:14:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnyzwok7p2w 2026-07-02 13:42:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpo5xsoa2s2m 2026-07-03 00:46:54+00:00| seen|...

CVE-2026-55597

creationtimestamp| type| source ---|---|--- 2026-07-02 11:56:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxzt4tn52o 2026-07-03 13:27:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnlk6zdd2y...

CVE-2026-14417

creationtimestamp| type| source ---|---|--- 2026-07-02 00:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqj2s5wc2e 2026-07-02 02:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpmwrtq35n2x 2026-07-02 03:00:27+00:00| seen|...