MINI-P62Q-FJFG-C9C9

Bulletin has no description...

MINI-QV3G-JJ47-H48Q

Bulletin has no description...

MINI-MRPM-Q7WV-VH3P

Bulletin has no description...

MINI-8C4X-CQ9F-PVGG

Bulletin has no description...

MINI-RJXF-M767-P3XW

Bulletin has no description...

MINI-GFVM-QG5V-PGRX

Bulletin has no description...

MINI-G646-FH2R-WJWG

Bulletin has no description...

CVE-2026-65907

creationtimestamp| type| source ---|---|--- 2026-07-23 13:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116969533025380702 2026-07-23 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcx3efa542r 2026-07-23 15:02:05+00:00| seen|...

CVE-2026-65912 DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...

CVE-2026-65455

creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwqelee2v...

CVE-2026-64142

creationtimestamp| type| source ---|---|--- 2026-07-23 12:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcrzkrruz2k...

CVE-2026-60158

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...

CVE-2026-60160

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...

CVE-2026-60150

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

PYSEC-2026-3482 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...

CVE-2026-64812

CVE-2026-64812 affects JetBrains IntelliJ IDEA prior to 2026.2. The vulnerability allows unauthorized input injection during a Remote Development session. Root cause details are not elaborated beyond the description; exploitation status and mitigation are not specified in the provided documents. ...

CVE-2026-64611

creationtimestamp| type| source ---|---|--- 2026-07-23 11:28:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrcqaxjpvx2z 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3344 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/bdufstecru/3344...

MINI-8Q83-9WW4-HMC5

Bulletin has no description...

ECHO-D56E-2B48-3DD3

Bulletin has no description...

CVE-2026-16723

creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...