PT-2026-81456

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic versions prior to 7.4.4 build 9401 Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an unauthenticated attacker to execute arbitrary...

PT-2026-81455

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description Adobe Campaign Classic is affected by a Server-Side Request Forgery SSRF issue, which occurs when a server is tricked into making requests to an unintended location. This flaw...

PT-2026-81457

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an attacker to execute arbitrary code in the contex...

CVE-2026-78268

creationtimestamp| type| source ---|---|--- 2026-08-24 22:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p...

CVE-2026-19568

creationtimestamp| type| source ---|---|--- 2026-08-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtucllupjp2l...

CVE-2026-75542

creationtimestamp| type| source ---|---|--- 2026-08-24 21:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/emqi26xw6zkmq...

CVE-2026-04321

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:04+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:09+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

ECHO-B159-47C9-E4C0

Bulletin has no description...

CVE-2025-3102-exploit

Questo repository non contiene un README...

Sakai Conversations has a Stored XSS Issue

Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in stored cross-site scripting XSS. Any authenticated user with access to a site that has the Conversations tool enabled...

DEBIAN-CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

CVE-2026-76838

creationtimestamp| type| source ---|---|--- 2026-08-24 18:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27 2026-08-24 19:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27...

CVE-2026-71914

creationtimestamp| type| source ---|---|--- 2026-08-24 18:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttxcbuit22p 2026-08-24 20:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu47icylo2f 2026-08-25 09:00:04+00:00| published-proof-of-concept|...

CVE-2026-78329

creationtimestamp| type| source ---|---|--- 2026-08-24 18:34:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7win4laqacc5s 2026-08-24 21:00:03+00:00| seen| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4 2026-08-25 00:00:10+00:00| published-proof-of-concept|...

DEBIAN-CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

DEBIAN-CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

DEBIAN-CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

CVE-2026-12554

creationtimestamp| type| source ---|---|--- 2026-08-24 16:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqmns2xymwnim...

CVE-2026-78370

creationtimestamp| type| source ---|---|--- 2026-08-24 16:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttoe6afsh24 2026-08-24 16:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttosta3722p...

DEBIAN-CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...