CVE-2026-5270

creationtimestamp| type| source ---|---|--- 2026-07-15 00:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngczzwyz2x 2026-07-15 13:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqotriltvq2p 2026-07-27 09:08:14+00:00| seen|...

ECHO-DA4C-ABEE-FA30

Bulletin has no description...

CVE-2025-56364

creationtimestamp| type| source ---|---|--- 2026-07-15 00:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqng325btt2z 2026-07-27 08:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj6r7uog2m 2026-07-27 08:53:06+00:00| seen|...

SUSE SLES12: libpacemaker-devel / libpacemaker3 / pacemaker / pacemaker-cli / etc (SUSE-SU-2026:2970-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2970-1 advisory. - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression bsc1268381. Tenable has extracted the preceding...

PT-2026-60283

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

PT-2026-60180

Name of the Vulnerable Software and Affected Versions Cloudreve versions 4.12.0 through 4.16.0 Description OAuth access tokens are issued without the client id claim. Consequently, the JWT JSON Web Token verifier fails to load token scopes into the request context. This causes the RequiredScopes...

CVE-2025-56365

creationtimestamp| type| source ---|---|--- 2026-07-14 23:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfl3k3pd2g 2026-07-27 08:48:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj5zv6g52z...

CVE-2026-48319

creationtimestamp| type| source ---|---|--- 2026-07-14 23:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t 2026-07-14 23:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g 2026-07-16 08:07:06+00:00| seen|...

CVE-2026-48325

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27 2026-07-14 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v 2026-07-16 06:07:06+00:00| seen|...

CVE-2026-15774

creationtimestamp| type| source ---|---|--- 2026-07-14 22:59:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncoq3d3f2g 2026-07-15 23:42:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926641968349809 2026-07-16 04:45:29+00:00| seen|...

MAL-2026-10632 Malicious code in cppt-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484688d5963a9246f4fe7a2b5c1c7ebe6bba135a2a5df66b3ab57f44978407b2 [email protected] declares a preinstall hook "preinstall": "node index.js" that runs automatically on npm install. index.js collects host and user...

CVE-2026-45363

creationtimestamp| type| source ---|---|--- 2026-07-14 22:16:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnaaypv4m2v 2026-07-15 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqng3v7m442f 2026-07-15 00:00:44+00:00| seen|...

UBUNTU-CVE-2026-46638

Twig is a template language for PHP. Prior to 3.26.0, % sandbox %% include % can include a template that was previously loaded outside the sandbox without re-invoking checkSecurity, allowing the cached template to use tags, filters, and functions that should have been denied by...

GHSA-MQXV-9RM6-W8QC

creationtimestamp| type| source ---|---|--- 2026-07-14 22:13:10+00:00| seen| https://gist.github.com/alon710/c304e0355d4b523094aabb49f860b83c...

CVE-2026-48356

creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7zmfnfg2f 2026-07-15 10:18:08+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoilwqix325 2026-07-15 14:38:21+00:00| seen|...

CVE-2026-55011

creationtimestamp| type| source ---|---|--- 2026-07-14 22:02:10+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:42+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-16 12:45:58+00:00| seen|...

JLSEC-2026-698 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding...

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

JLSEC-2026-717

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL woul...

JLSEC-2026-723 Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion

Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size handling of the AuthorityKeyIdentifier extension...

JLSEC-2026-700 Out-of-bounds heap read during SM2/SM3 certificate signature verification

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...