ECHO-00B6-A8A9-0340

Bulletin has no description...

CVE-2026-7700

creationtimestamp| type| source ---|---|--- 2026-06-23 08:20:43+00:00| seen| https://bsky.app/profile/yogsotho.bsky.social/post/3mowxrnuw722s...

GHSA-VMHF-C436-HXJ4 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-55865 vulnerabilities

Vulnerabilities for packages: datahub-ingestion...

CVE-2026-10521

creationtimestamp| type| source ---|---|--- 2026-06-23 07:36:29+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798271507262478 2026-06-23 07:45:43+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798307883543003 2026-06-23 11:20:33+00:00| seen|...

CVE-2026-8379

The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by any user through the Frontend File Manager Plugin WordPress plugin through 23.6 by iterating...

MINI-24WC-4478-4F6M

Bulletin has no description...

MINI-93FC-9JJ2-8FM6

Bulletin has no description...

MINI-WFQG-57C8-9JXC

Bulletin has no description...

MINI-VWFM-8X37-FJ5X

Bulletin has no description...

MINI-8GJQ-94FJ-8CJ6

Bulletin has no description...

CVE-2026-54232

creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j 2026-07-01 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x...

CVE-2026-48167

creationtimestamp| type| source ---|---|--- 2026-06-23 01:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow75wphmt2e 2026-06-24 07:11:47+00:00| seen| https://gist.github.com/alon710/ef60a8d2e003433e0632a30f0def6b96...

CVE-2026-48502

creationtimestamp| type| source ---|---|--- 2026-06-23 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6ee6ob22q 2026-07-20 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2mvnvtah26...

CVE-2026-48506

creationtimestamp| type| source ---|---|--- 2026-06-23 00:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5neb5pq2v 2026-07-22 14:54:29+00:00| seen| https://gist.github.com/djlan/99ee4894b545754eff357e18c53ca5f1...

CVE-2026-54352

creationtimestamp| type| source ---|---|--- 2026-06-23 00:12:27+00:00| seen| https://bsky.app/profile/suriq.io/post/3mow4im4pyb2r 2026-06-26 22:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7y5eswhr2c 2026-06-28 09:06:53+00:00| seen|...

PT-2026-51633

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description Gogs contains an information disclosure issue where the 'GET /api/v1/orgs/:orgname/teams' endpoint returns all teams for any organization without requiring authentication. This occurs because the route...

Denial of service via malformed Host header

Impact If this library is used to implement a WebSocket server on top of a TCP server, by using the WebSocket::Driver.server method, then a client can cause the server to crash by sending a Host header that is not a valid host:port string. When this happens, a URI::InvalidURIError exception is...

PT-2026-51529

NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response...

PT-2026-53084

Name of the Vulnerable Software and Affected Versions 7-Zip for Windows versions prior to 26.02 Description 7-Zip fails to preserve the Mark-of-the-Web MotW when extracting a specially crafted RAR5 archive. The software uses a guard to suppress archive-supplied Zone.Identifier streams, but it onl...