CVE-2026-10823

creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

ALSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

📄 WordPress WP Full Stripe Free 8.4.3 Missing Authorization

The WP Full Stripe Free plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: June 26, 2026 - Last Updated: June 27, 2026 - Researcher: Netwurm...

ECHO-87FF-1FAA-6DFD

Bulletin has no description...

CVE-2026-11597

creationtimestamp| type| source ---|---|--- 2026-06-27 10:50:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q 2026-06-27 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x 2026-06-27 20:16:09+00:00| seen|...

CVE-2026-12432

The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. The handler is registered through both wpajax and wpajaxnopriv hooks and the underlying updatefailedpaymentstatus function...

CVE-2025-60474

creationtimestamp| type| source ---|---|--- 2026-06-27 03:17:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaipm22hw2v 2026-06-30 00:08:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpk4cuao27...

[SECURITY] Fedora 44 Update: nginx-mod-vts-0.2.4-11.fc44

Nginx virtual host traffic status module...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-11.fc43

Nginx virtual host traffic status module...

NewStart CGSL MAIN 6.06 : python3 Vulnerability (NS-SA-2025-0243)

The remote NewStart CGSL host, running version MAIN 6.06, has python3 packages installed that are affected by a vulnerability: - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as globally reachable or private. This affected the...

CVE-2026-53576

creationtimestamp| type| source ---|---|--- 2026-06-26 22:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xlajhsm2c 2026-06-27 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcar4z6g52m 2026-06-29 19:25:26+00:00| seen|...

CVE-2026-53304

creationtimestamp| type| source ---|---|--- 2026-06-26 20:31:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116818304806421907 2026-07-06 06:52:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:30:18+00:00|...

CVE-2026-12411

creationtimestamp| type| source ---|---|--- 2026-06-26 19:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7pzez34222 2026-07-15 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqnghcoj4l25...

GHSA-4C8J-MGM4-QQVP

creationtimestamp| type| source ---|---|--- 2026-06-26 19:42:06+00:00| seen| https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1745 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1745 2026-08-01 20:00:05+00:00| seen|...

CVE-2026-53308

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating workqueue to fix two bugs at the same time: 1. Driver leaks the memory on remove, because the workqueue is not destroyed. 2...

CVE-2026-54557

creationtimestamp| type| source ---|---|--- 2026-06-26 19:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ns2ae3e2q...

CVE-2026-57655

creationtimestamp| type| source ---|---|--- 2026-06-26 17:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7iejdxaa2x 2026-07-07 12:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2lhk32xz23...

DRUPAL-CONTRIB-2026-064

The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. tealiumiq stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This...

CVE-2026-57588

creationtimestamp| type| source ---|---|--- 2026-06-26 14:40:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76f4d3ur2c 2026-07-22 17:00:04+00:00| seen| Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw 2026-07-23 00:00:09+00:00| published-proof-of-concept|...