CVE-2026-14775

creationtimestamp| type| source ---|---|--- 2026-07-06 00:10:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwshwzj5k26 2026-07-07 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2ld4pnjq2n...

CVE-2026-10657

creationtimestamp| type| source ---|---|--- 2026-07-06 00:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwsd2euuv22 2026-07-07 12:06:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2kwdklox2s...

CVE-2026-10656

creationtimestamp| type| source ---|---|--- 2026-07-06 00:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpws2gljsb2p 2026-07-07 11:56:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2ke6vsvr2k...

CVE-2026-59519

creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...

The vulnerability of the ipv6_rpl_srh_rcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...

pnpm < 10.34.2 / 11.x < 11.5.3 Multiple Vulnerabilities

The version of pnpm installed on the remote host is prior to 10.34.2, or 11.x prior to 11.5.3. It is, therefore, affected by multiple vulnerabilities: - pnpm and pacquet expanded $ENVVAR placeholders from repository-controlled .npmrc and pnpm-workspace.yaml into registry request destinations and...

PT-2026-56007

Name of the Vulnerable Software and Affected Versions FOSSBilling versions 0.6.0 through 0.7.2 Description A SQL injection issue exists in the Massmailer module filter functionality. An authenticated administrator can provide crafted filter values during the update of a mass email message, which...

PT-2026-56027

Name of the Vulnerable Software and Affected Versions Coolify versions 4.0.0-beta.471 through 4.0.0-beta.473 Description A regression in the SHELL SAFE COMMAND PATTERN allows ampersands to be used in custom Docker Compose build, start, and pre/post-deployment command fields. This enables an...

Malicious code in enbd-react-lib (npm)

The enbd-react-lib package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization an 'enbd' interna...

PT-2026-56024

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.474 Description The application lacks authentication, rate limiting, and input validation at the 'POST /api/feedback' endpoint. This allows arbitrary content to be forwarded directly to a Discord webhook,...

Android Security Bulletin—July 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

Malicious code in @flex-ng/filter-pipe (npm)

The @flex-ng/filter-pipe package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @flex-n...

PT-2026-55971

Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...

CVE-2026-59520

creationtimestamp| type| source ---|---|--- 2026-07-05 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrsytwez2p 2026-07-07 08:04:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25geh37n2v...

CVE-2026-10513

creationtimestamp| type| source ---|---|--- 2026-07-05 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpwpftltek2h...

CVE-2024-21254

creationtimestamp| type| source ---|---|--- 2026-07-05 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwovqwn5m2a...

CVE-2026-53913

creationtimestamp| type| source ---|---|--- 2026-07-05 20:59:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwhr67bwy2o 2026-07-06 12:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116872919680337020 2026-07-06 12:00:30+00:00| seen|...

CVE-2026-55993

creationtimestamp| type| source ---|---|--- 2026-07-05 20:49:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwh77eadh25 2026-07-06 12:51:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy4xvx6z62s 2026-07-09 03:56:59+00:00| seen|...

CVE-2026-56139

creationtimestamp| type| source ---|---|--- 2026-07-05 20:44:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o 2026-07-06 11:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26 2026-07-09 03:54:50+00:00| seen|...

CVE-2026-49099

creationtimestamp| type| source ---|---|--- 2026-07-05 20:39:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgnayc3y2m 2026-07-09 03:56:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qhxzsx72x 2026-07-22 17:00:05+00:00| seen|...