CVE-2026-38570

bacnetstack 1.3.1 contains an Out-of-bounds Read in bacnettagnumberdecode which allows attackers to cause a denial of service...

CVE-2026-47320

A flaw was found in rlottie. This vulnerability allows an attacker to cause a Denial of Service DoS or memory corruption by tricking a user or application into processing a specially crafted animation file. The issue stems from uncontrolled recursion and uninitialized pointer access when handling...

MINI-487W-9VW8-H922

Bulletin has no description...

MINI-835J-X3C5-X97C

Bulletin has no description...

CVE-2026-2652

creationtimestamp| type| source ---|---|--- 2026-06-04 09:46:33+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2652.yaml 2026-08-08 10:06:36+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-08-07 2026-08-08...

MINI-WXCX-7GGW-9439

Bulletin has no description...

MINI-P49X-QCC8-8757

Bulletin has no description...

CVE-2026-7764

creationtimestamp| type| source ---|---|--- 2026-06-04 06:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngz5xiqip26...

PT-2026-46256

bacnet stack 1.3.1 contains an Out-of-bounds Read in bacnet tag number decode which allows attackers to cause a denial of service...

CVE-2026-38570

The bacnet_stack version 1.3.1 is vulnerable to an Out-of-bounds Read within the bacnet_tag_number_decode() function. An attacker can provide specially crafted input to trigger a read outside the allocated memory bounds, potentially leading to application crashes, unexpected behavior, or a denial...

CVE-2026-38570

bacnetstack 1.3.1 contains an Out-of-bounds Read in bacnettagnumberdecode which allows attackers to cause a denial of service...

CVE-2026-42840

An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...

We found this fake-invoice campaign while scammers were still building it

A new batch of fake payment invoices is being staged right now, and we caught the campaign while it was still being put together. The emails impersonate PayPal, Amazon, and Geek Squad, and others, and they all share one goal: to scare you into calling a phone number where a fake "support agent" i...

CVE-2026-42840 ERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals

An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...

CVE-2026-35076

creationtimestamp| type| source ---|---|--- 2026-06-03 12:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf4wdftpo2d 2026-06-04 00:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcxuipyk2n 2026-07-03 23:49:33+00:00| seen|...

Keep getting calls from questionable numbers? Meet Scam Number Check

Have you ever gotten a phone call and had a gut feeling that those random digits looked extra suspicious? It happens to millions of people every day. While many people have trained themselves to ignore such calls, they still pose a threat across the US. In fact, scammers stole more than $21 billi...

RHSA-2026:22710 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

SUSE-SU-2026:2229-1 Security update for hplip

This update for hplip fixes the following issues Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via ...

ECHO-6CEE-1D08-9B8B

Bulletin has no description...

SUSE-SU-2026:2222-1 Security update for hplip

This update for hplip fixes the following issues Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via ...