WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by luc in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions = 1.5.1...

CVE-2026-64384

creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmakkgqiq2z 2026-09-02 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902 2026-09-15 12:46:43+00:00|...

EUVD-2026-48800

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...

CVE-2026-45812

creationtimestamp| type| source ---|---|--- 2026-07-24 13:12:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgkps3ci24...

CVE-2026-62561

Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...

CVE-2026-60462

...

CVE-2026-60298

CVE-2026-60298 affects Oracle Coherence (Fusion Middleware Core) with affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can compromise Oracle Coherence, potentially taking over the service. CVSS v3.1 base score 9.8 (CRITICAL) with hi...

CVE-2026-64091 batman-adv: tt: fix TOCTOU race for reported vlans

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...

CVE-2026-64091 batman-adv: tt: fix TOCTOU race for reported vlans

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...

CVE-2026-63958 usb: typec: ucsi: validate connector number in ucsi_connector_change()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI CCI notification is a 7-bit field supplied by the PPM. ucsiconnectorchange uses it to index the ucsi-connector array without checki...

CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

CVE-2026-16151

A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilter of the file src/filters.ts. Such manipulation of the argument column leads to improperly controlled modification of object prototype attributes. The attack can be executed remotely. The project...

PT-2026-60783

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to, including private repository owners and names, branch names, commit SHAs,...

CVE-2026-55949

creationtimestamp| type| source ---|---|--- 2026-07-14 19:00:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237 2026-07-14 22:03:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:00:52+00:00| seen|...

UBUNTU-CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

EUVD-2026-42912

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data...

CVE-2026-59794

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data...

CVE-2026-59833

creationtimestamp| type| source ---|---|--- 2026-07-10 00:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqawawpeym27...

CVE-2026-60104

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24 2026-07-08 23:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z 2026-07-09 16:00:46+00:00| seen|...

CVE-2026-13122

creationtimestamp| type| source ---|---|--- 2026-07-06 16:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyjztr2ey22 2026-07-09 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqagfnydfd2g...