OPENSUSE-SU-2026:20122-1 Security update for python-h2

This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers bsc1248737...

CVE-2026-23014

creationtimestamp| type| source ---|---|--- 2026-01-28 15:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdilogrebe2h...

CVE-2026-1056

creationtimestamp| type| source ---|---|--- 2026-01-28 13:55:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdiggqeliv27 2026-01-28 14:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdigsfe4h32t 2026-01-29 21:15:25+00:00| seen|...

ECHO-5566-E5F1-09D5

Bulletin has no description...

CGA-253R-6V2P-HWF2

Bulletin has no description...

CVE-2026-24910

creationtimestamp| type| source ---|---|--- 2026-01-28 01:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh52bzghh2c...

ECHO-7676-32A6-DC30 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

ECHO-2119-1036-9B87 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

ECHO-C53B-F085-2752 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

WordPress plugin Recooty – Job Widget (Old Dashboard) Cross-site Request Forgery Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin: "Change WP URL" has a cross-site request forgeing vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress Plugin: Bitcoin Donation Button – Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-68883

creationtimestamp| type| source ---|---|--- 2026-01-27 23:29:14+00:00| seen| Telegram/-bGFeUnXd3wpSfC7SViVpgMiu9utMM47a2xPyUysuC9P-EU...

CVE-2026-1479

creationtimestamp| type| source ---|---|--- 2026-01-27 19:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgi3nh3u72r...

Watch out for AT&T rewards phishing text that wants your personal details

A coworker shared this suspicious SMS where AT&T supposedly warns the recipient that their reward points are about to expire. Phishing attacks are growing increasingly sophisticated, likely with help from AI. They're getting better at mimicking major brands—not just in look, but in behavior...

MINI-QWGQ-58CX-9J7C

Bulletin has no description...

DEBIAN-CVE-2025-28164

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via pngcreatereadstruct function...

CVE-2020-36940

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

CVE-2020-36940

CVE-2020-36940 affects Easy CD & DVD Cover Creator 4.13. A buffer overflow in the serial-number input field can crash the application when a ~6000-byte payload is pasted. The issue has PoC/exploit references in public material; no remediation is provided in the supplied documents. The CVSS data i...

CVE-2020-36940 Easy CD & DVD Cover Creator 4.13 - Denial of Service

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...