CVE-2026-54635

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...

CVE-2026-63303

creationtimestamp| type| source ---|---|--- 2026-07-28 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-63301...

CVE-2026-62427

creationtimestamp| type| source ---|---|--- 2026-07-28 15:07:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpou4pvvw2r 2026-07-29 13:55:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24 2026-07-30 04:45:59+00:00| seen|...

CVE-2026-13790

A side-channel information leakage flaw was found in the Scroll component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=457771782...

CVE-2026-13890

An out of bounds read flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500601345...

CVE-2026-13974

An integer overflow flaw was found in the Safe Browsing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513850475...

CVE-2026-14404

An inappropriate implementation flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513337989...

CVE-2026-58344

A flaw was found in Moodle. The regrade action in the quiz overview report did not include the necessary token, leading to a Cross-Site Request Forgery CSRF vulnerability. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, such as regrading...

CVE-2026-58348

A flaw was found in Moodle. Missing capability checks in the report builder fragment callbacks could allow authenticated users to retrieve report data that they are not authorized to access. This could lead to information disclosure...

CVE-2026-64743

creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:41+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:15:34+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:01:08+00:00|...

CERTFR-2026-CTI-005

creationtimestamp| type| source ---|---|--- 2026-07-27 23:11:36+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mrnzfzcsp324...

EUVD-2026-49374

A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote exploitation of the attack is possibl...

DEBIAN-CVE-2026-17513

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

CVE-2026-55973

A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...

CVE-2026-17513

CVE-2026-17513 affects ggml-org whisper.cpp; the issue lies in ggml_ftype_to_ggml_type in ggml/src/ggml.c where manipulation of the ftype argument leads to a reachable assertion. Reportedly requires local access; the project was informed via an issue but has not responded. No remediation or explo...

CVE-2026-17513

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

EUVD-2026-49313

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

CERTFR-2026-ACT-032

creationtimestamp| type| source ---|---|--- 2026-07-27 12:44:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mrmwf2trmd27 2026-07-27 12:44:48+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116992001998966808 2026-07-27 13:36:16+00:00| seen|...

ai-pentest-agent

AI Pentest Agent 🛡️🤖 The first open-source autonomous AI pe...

PT-2026-64908

A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...