CVE-2026-55950 DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

Time-of-check Time-of-use TOCTOU race condition vulnerability in Erlang/OTP ssl dtlspacketdemux module allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener. A DTLS server listener uses a single shared dtlspacketdemux genserver process to route incoming UDP...

PYSEC-2026-668 MoinMoin Directory traversal vulnerability

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in the MOINID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been...

CVE-2026-58263

creationtimestamp| type| source ---|---|--- 2026-07-02 12:51:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo34ff4ns2b 2026-07-31 20:35:14+00:00| published-proof-of-concept| https://github.com/xdan/jodit/security/advisories/GHSA-rxcw-mc6f-6hr3...

Linux Distros Unpatched Vulnerability : CVE-2026-53337

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname which can return NULL if the requested interfac...

UBUNTU-CVE-2026-14429

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13819

creationtimestamp| type| source ---|---|--- 2026-07-01 19:50:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmc2eecjz22 2026-07-02 07:19:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:41:27+00:00| seen|...

CVE-2026-13810

creationtimestamp| type| source ---|---|--- 2026-07-01 19:47:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbvgrwmf2b 2026-07-02 01:05:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtmwbmdl2l 2026-07-02 07:19:26+00:00| seen|...

GHSA-VJ5W-9MXG-PPMH vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-4449 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q3C8-P5VP-WR87 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-10530 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-11250 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GJCP-2HJJ-6C4V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2448-7FJ5-7V9W vulnerabilities

Vulnerabilities for packages: chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-13982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI...

DEBIAN-CVE-2026-13966

Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13955

Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. Chromium security severity: Medium...

CVE-2026-13930

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-58015

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

RHEL 10 : git-lfs (RHSA-2026:30855)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:30855 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing...