openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

CVE-2026-78895

A flaw was found in Chromium. A remote attacker could exploit an information leak in the Paint component by crafting a malicious HTML page. This vulnerability allows the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive information...

CVE-2026-18080

creationtimestamp| type| source ---|---|--- 2026-08-26 12:21:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy52s6sgxysq2 2026-08-26 12:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtye4fhhlk2e 2026-08-26 23:00:03+00:00| published-proof-of-concept|...

pam security update

An update is available for pam. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pluggable Authentication Modules PAM provide a system to set up authentication...

Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)

A flaw was found in AssertJ. An XML External Entity XXE vulnerability exists in the XmlStringPrettyFormatter component, which is used by the isXmlEqualToCharSequence assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read...

CVE-2026-55618

A flaw was found in emlparser, a Python module for parsing email files. The cleanfounduri function incorrectly validates Uniform Resource Locator URL strings by processing them before unescaping HTML entities. This allows a remote attacker to craft malicious URLs using HTML entities that are then...

CVE-2021-521-Exploit

CVE-2021-521-Exploit Lab-Exploit CVE-2021-521: Die App nutzt Java-Reflection, um auf Android-Systemkomponenten zuzugreifen und eine Liste aller installierten Apps abzurufen. Die Reflection greift auf ApplicationPackageManager und PackageManagerService zu und nutzt dabei eine Schwachstelle aus...

CVE-2026-77539

creationtimestamp| type| source ---|---|--- 2026-08-26 10:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty5ftznx32c...

CVE-2026-80234

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure...

EUVD-2026-66343

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure...

CVE-2026-80234 CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing Authentication

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure...

CVE-2026-80234

CAYIN CMS-WS and CMS-SE , developed by CAYIN Technology, are affected by a Missing Authentication vulnerability. An unauthenticated remote attacker can leverage a specific functionality to obtain media file lists , resulting in partial information disclosure . The CNA TW CERT assigned a CVSS 3.1 ...

CVE-2025-14847

CVE-2025-14847 – Exploit di perdita di memoria non autenticata di MongoDB Panoramica Un exploit proof‑of‑concept PoC per la vulnerabilità di decompressione zlib di MongoDB che consente a utenti malintenzionati non autenticati di leggere la memoria sensibile del server. Il PoC è implementato in...

CVE-2018-13379

🛡️ CVE-2018-13379 - Vulnerabilità Fortinet SSL VPN 🔍 Panoramica CVE-2018-13379 è una vulnerabilità critica di path traversal in Fortinet FortiOS SSL VPN. Consente agli attaccanti di scaricare file di sessione web VPN ed estrarre informazioni sensibili. Impatto: Divulgazione di informazioni nomi...

cve-2025-14847

MongoBleed: CVE-2025-14847 – Strumento di Rilevamento delle Perdite di Memoria MongoBleed è uno strumento di audit di sicurezza ad alte prestazioni progettato per rilevare e dimostrare CVE-2025-14847. Questa vulnerabilità consente a un attaccante remoto non autenticato di divulgare frammenti di...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode on vivo devices allows users to view local gallery photos directly within that page. The vulnerability is scored CVSS 4.0 base 2.4 (LOW) with a physical attack vector , indicating proximity access is required and no privileges or ...

CVE-2026-63041

creationtimestamp| type| source ---|---|--- 2026-08-26 06:17:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dmr65cizrr3hf 2026-08-26 12:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g3x5tys4m5sfr...

CVE-2026-79654

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...