CVE-2026-73404: Missing Authorization

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-23931: Observable Discrepancy

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality...

CVE-2026-23934: Asymmetric Resource Consumption (Amplification)

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

CVE-2026-73397: Deserialization of Untrusted Data

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

CVE-2026-73400: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-74300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a...

CVE-2026-73377: Missing Authorization

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-23922: Insufficiently Protected Credentials

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...

CVE-2026-73352: Missing Authorization

Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...

CVE-2026-32333: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-72301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc3-control: Fix TOCTOU in bytesput and bytesget In sofipc3bytesput, the size used for the memcpy is derived from the old data-size already in the...

CVE-2026-32463: Unrestricted Upload of File with Dangerous Type

Contributor Arbitrary File Upload in Sync Post With Other Site = 1.9.3 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-74304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: fix NULL pointer dereference in qcasetup for non-serdev device hu-serdev ...

Linux Distros Unpatched Vulnerability : CVE-2026-72427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix effective prog array index with BPFFPREORDER replaceeffectiveprog and purgeeffectiveprogs located the slot in the effective array by walking the progra...

Exploit for CVE-2026-15748

CVE-2026-15826, CVE-2026-15748 Donate Support the mainten...

preflight v0.20.1

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

augustus v0.14.20

Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...

CVE-2026-75054: Server-Side Request Forgery (SSRF)

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100351 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101093 advisory. Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...