CVE-2026-66662

creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg37i3ay2i 2026-08-06 22:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msh24av7pe2e...

CVE-2026-65574

creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfu35bbr2a...

CVE-2026-65571

creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgftzmnlr2l...

CVE-2026-28139

creationtimestamp| type| source ---|---|--- 2026-08-06 15:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfmvphqq2m...

CVE-2026-28005

creationtimestamp| type| source ---|---|--- 2026-08-06 15:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfmuhmkn2f...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-57817

creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6n2duc2o 2026-08-06 20:51:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h7sikdbbfri6u...

CVE-2026-66664

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

DEBIAN-CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

ALPINE-CVE-2025-49506

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

CVE-2026-10535

creationtimestamp| type| source ---|---|--- 2026-08-06 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgcyvmwba2n...

CVE-2026-66843

CVE-2026-66843 affects html_sanitize_ex HTML5 scrubber. The vulnerability arises because the object element (data attribute) is not registered in allow_tag_with_uri_attributes/3, and the only guard is a lowercase javascript: prefix. This allows attacker-supplied content to be embedded in a truste...

CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

CVE-2026-32327 Apache Portable Runtime Utility: apr-util XML stack recursion crash

A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...

CVE-2026-65560 WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...

CVE-2026-28178 WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...

CVE-2026-58043

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories. Mitigation Avoid enabling the Node.js Permission Model by not using the --permission flag when starting Node.js applications. This...

Azure Logic Apps Information Disclosure Vulnerability

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

Application Insights Profiler Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...