EUVD-2026-60320

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...

CVE-2026-33437

In Stirling-PDF before 2.0.0, the Get Info workflow inserts untrusted PDF Title/Author metadata into the DOM via innerHTML in get-info-on-pdf.html, enabling stored XSS when a user clicks Get Info; the flaw is fixed in version 2.0.0. No exploitation evidence is provided in the documents.

GHSA-92HR-GMR6-H8CP Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

Fix: PR 7906 ether/etherpad. A set of medium/low hardening fixes: - Weak RNG for tokens CWE-330: author/session/readonly IDs were generated with Math.random client and server. Now use crypto.getRandomValues. - Login timing / no failure delay CWE-208/CWE-307: the OIDC interaction login used a...

CVE-2026-68472

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted EHT Multi-Link Element MLE in an MBSSID beacon. This could cause the kernel to read beyond the intended memory boundary when processing the...

MINI-6XR4-69JF-J5CX

Bulletin has no description...

MINI-3743-F47X-8Q7H

Bulletin has no description...

MINI-GFX9-447R-Q2WH

Bulletin has no description...

MINI-V83F-59FJ-WWGP

Bulletin has no description...

MINI-2H8C-QGMR-7HCC

Bulletin has no description...

CVE-2026-72442

creationtimestamp| type| source ---|---|--- 2026-08-17 12:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbqi2vn242e...

CVE-2026-74872

creationtimestamp| type| source ---|---|--- 2026-08-17 12:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo44i3ol2b 2026-08-17 18:10:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcce7z3bd2j 2026-08-20 00:03:28+00:00| seen|...

CVE-2026-74889

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

EUVD-2026-60108

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...

MINI-HF68-PP29-89M2

Bulletin has no description...

MINI-68FV-45R9-GGR4

Bulletin has no description...

MINI-445V-RW3V-5XQV

Bulletin has no description...

BIT-DOTNET-SDK-2026-62902 .NET Information Disclosure Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

MINI-G6MX-525P-87PH

Bulletin has no description...

CVE-2026-74791

creationtimestamp| type| source ---|---|--- 2026-08-16 14:46:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/djmvulg5yvrlu 2026-08-16 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt7gpnfucb23 2026-08-16 15:00:47+00:00| seen|...