MINI-9HJM-J876-R823

Bulletin has no description...

ECHO-32AF-C182-7508

Bulletin has no description...

ECHO-9EB8-7124-0A2B

Bulletin has no description...

JLSEC-2026-1036 ImageMagick: Use-After-Free in crafted 8BIM when identifying an image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51...

CVE-2026-17959

creationtimestamp| type| source ---|---|--- 2026-07-30 05:22:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 10:50:02+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-67191

Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the recv loop's termination condition uses ...

CVE-2026-67191

Xlight FTP Server prior to 3.9.5 is affected by a pre-authentication heap buffer overflow in the SSH parser. A logic error in the recv loop termination (OR instead of AND) enables exploitation on any SSH or SFTP connection before authentication, allowing remote unauthenticated access with high im...

EUVD-2026-50398

Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the recv loop's termination condition uses ...

CVE-2026-64546

A flaw was found in the Linux kernel. A specially crafted Extended Display Identification Data EDID, which describes display capabilities, can cause a heap out-of-bounds read in the drmparsetiledblock function within the drm/edid component. This vulnerability could lead to system instability or t...

CVE-2026-15325

creationtimestamp| type| source ---|---|--- 2026-07-28 22:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqitavyqz22 2026-07-29 15:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs7fjz6hb27 2026-07-30 04:47:05+00:00| seen|...

CVE-2026-16496

The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability,...

MINI-J6GG-C8RJ-W564

Bulletin has no description...

MINI-54F2-HG53-MXHH

Bulletin has no description...

CVE-2026-17524

creationtimestamp| type| source ---|---|--- 2026-07-28 08:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroyct52q62e 2026-07-28 08:53:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrozwcneai2y...

EUVD-2026-49597

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

MINI-5JP4-34MF-JMJX

Bulletin has no description...

CVE-2026-56167

creationtimestamp| type| source ---|---|--- 2026-07-25 11:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhpmyb3gk2m 2026-07-31 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvplolmdu22...

CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

EUVD-2026-48997

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...