The vulnerability of the context Isolation mechanism of the software platform for creating Electron applications allows a attacker to gain full access to the system.

The vulnerability of the context isolation mechanism of the Electron application development platform is related to the breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to gain full access to the system...

CVE-2026-71555

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context e.g., target="blank" retain a window.opener referen...

DEBIAN-CVE-2026-19158

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-71555 PILOS: Reverse tabnabbing in room description

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context e.g., target="blank" retain a window.opener referen...

CVE-2026-71555 PILOS: Reverse tabnabbing in room description

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context e.g., target="blank" retain a window.opener referen...

CVE-2026-71555

PILSOS (the PILOS frontend for BigBlueButton) is affected from version 2.1.0 through 4.14.1 by missing Cross-Origin-Opener-Policy headers, allowing reverse tabnabbing via links that open new browsing contexts (target="_blank"). A malicious destination page could access window.opener to navigate o...

CVE-2026-48086 OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN promotes themselves to platform-wide GLOBALADMIN through a single PUT request. The role-update handler accepts the GLOBALADMIN enum value from any tena...

CVE-2026-48086

OpenReception’s appointment-booking software (pre‑1.0.2) allows a TENANT_ADMIN to promote themselves to GLOBAL_ADMIN via a single PUT to the role-update handler. The handler accepts GLOBAL_ADMIN from any tenant admin updating their own staff, with no policy enforcing that only an existing GLOBAL_...

CVE-2026-48086 OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN promotes themselves to platform-wide GLOBALADMIN through a single PUT request. The role-update handler accepts the GLOBALADMIN enum value from any tena...

CVE-2026-19149

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12072 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

GHSA-FG7F-2386-8897 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

CVE-2025-49506

creationtimestamp| type| source ---|---|--- 2026-08-06 19:59:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/46253jene2lfd...

CVE-2026-71434 Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow...

CVE-2026-66709

creationtimestamp| type| source ---|---|--- 2026-08-06 16:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxseog32p 2026-08-06 21:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgws3k3xd2l...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to Denial Of Service due to vulnerabilities in Immutable.js

Summary Platform Navigator in IBM Cloud Pak for Integration is vulnerable to Denial Of Service due to vulnerabilities in Immutable.js CVE-2026-59879, CVE-2026-59880. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many...

Important: Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.4 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-70639 llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

CVE-2026-64564

creationtimestamp| type| source ---|---|--- 2026-08-06 15:03:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett 2026-08-06 15:22:49+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117049246952190178 2026-08-06 15:25:14+00:00| seen|...