SUSE CVE-2026-71437

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulnerable to prototype pollution when a diagram defines a group with an id of proto. Because the group id is used directly ...

CVE-2026-19210

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img/imgName leads to unrestricted upload. The attack may be launched remotely. The exploit has be...

CVE-2026-19208

A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument FIDJYLB results in enforcement of behavioral workflow. The attack can be launched remotely. A high complexity level is...

ECHO-88D3-5E9C-D468

Bulletin has no description...

CVE-2026-16637 OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers User-Id, Echo-Token to attacker-controlled endpoints...

EUVD-2026-54479

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers User-Id, Echo-Token to attacker-controlled endpoints...

CVE-2026-14365

creationtimestamp| type| source ---|---|--- 2026-08-07 13:00:04+00:00| seen| Telegram/MCYJbaY7Y1JiV57VXPInnrYmoyNrGbvHNXFyTTZxyGkIzQh 2026-08-07 18:00:03+00:00| seen| Telegram/y4yfNFl35EEKw5vv-LeIXH7MMyMaGazDVpTc0HRfJalwUA 2026-08-08 00:02:15+00:00| seen|...

MAL-2026-13516 Malicious code in forge-gas-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1f6143f5a7c6106ab4ba0a21a6adaf9020e332835b1e528de6f36b64537734 index.js is advertised as a Foundry gas-report diff utility but on module load / CLI run schedules a setTimeout of 259,200,000 ms 3 days that calls...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

CVE-2026-19079

creationtimestamp| type| source ---|---|--- 2026-08-07 08:37:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ppz2ygcs73pe...

CVE-2026-0673

creationtimestamp| type| source ---|---|--- 2026-08-07 08:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msi4h62psp2r...

ROOT-OS-DEBIAN-13-CVE-2026-63825 CVE-2026-63825 in linux - Patched by Root

Root has patched CVE-2026-63825 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-46216 CVE-2026-46216 in linux - Patched by Root

Root has patched CVE-2026-46216 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23373 CVE-2026-23373 in linux - Patched by Root

Root has patched CVE-2026-23373 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68776 CVE-2025-68776 in linux - Patched by Root

Root has patched CVE-2025-68776 in the linux package for Root:Debian:13. Multiple fixed versions available...

GHSA-HMQG-CXWW-WQHQ

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:19+00:00| seen| https://gist.github.com/alon710/a294e95161c29ae2353666d3ed774930...

GHSA-RVMM-V933-JGXQ

creationtimestamp| type| source ---|---|--- 2026-08-07 01:35:03+00:00| seen| https://gist.github.com/alon710/44b00a029eb5e56bac1f996f02574592...

CVE-2026-56161

creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...

EUVD-2026-54228

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be executed remotely. The exploit has been made...