CGA-2QVQ-G333-9V9Q

Bulletin has no description...

MINI-R828-M3CR-85HJ

Bulletin has no description...

CVE-2026-0275

creationtimestamp| type| source ---|---|--- 2026-07-10 00:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0275...

CVE-2026-54004

creationtimestamp| type| source ---|---|--- 2026-07-09 21:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqakhwvc2726...

CVE-2026-14142 vulnerabilities

Vulnerabilities for packages: chromium...

CGA-65PM-22GG-F63C

Bulletin has no description...

CVE-2026-15108

creationtimestamp| type| source ---|---|--- 2026-07-09 04:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CGA-7W89-HXRR-C499

Bulletin has no description...

CGA-3743-RFCW-38VJ

Bulletin has no description...

CVE-2026-15138

A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function validatefilepath of the file mcptexteditor/texteditor.py. Such manipulation of the argument filepath leads to path traversal. The attack can be launched remotely. The exploit has been...

CGA-4V73-6Q5R-6WHM

Bulletin has no description...

CGA-782X-GVVH-R297

Bulletin has no description...

CGA-33CC-P7MV-V2XM

Bulletin has no description...

CVE-2026-6371 Stored XSS in Limatek's LimRAD NAC

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This issue affects LimRAD NAC: before 5.5.7.3.9...

CVE-2026-58583

creationtimestamp| type| source ---|---|--- 2026-07-07 23:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rfwfy5v2t...

Slack integration leaks sensitive information in logs

ImpactSentry's Slack integration incorrectly records the incoming request body in logs. This request data can contain sensitive information, including the deprecated Slack verification token. With this verification token, it is possible under specific configurations, an attacker can forge request...

PYSEC-2026-2086

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

CVE-2026-11855

The Simple Membership WordPress plugin (versions

CVE-2026-11855

The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from them before outputting it in an administrator notice, allowing unauthenticated attackers to inject arbitrary web...

CVE-2026-11855 Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version

The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from them before outputting it in an administrator notice, allowing unauthenticated attackers to inject arbitrary web...