PT-2026-65656

Summary The WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce --no-delete on the WebDAV MOVE verb. MOVE deletes the source file rename removes it from its original path, and with Overwrite: T it additionally performs an explicit RemoveAll on the destination. Under -w...

SUSE SLED15 / SLES15 Security Update : alsa (SUSE-SU-2026:3270-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3270-1 advisory. This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c th...

Linux Distros Unpatched Vulnerability : CVE-2026-42792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang...

Linux Distros Unpatched Vulnerability : CVE-2026-45623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prio...

CVE-2026-43723

creationtimestamp| type| source ---|---|--- 2026-07-27 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnyt7hlpa2e 2026-07-28 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:20:36+00:00|...

CVE-2026-43749

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysyqcws2c 2026-07-28 04:49:31+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:44+00:00|...

CVE-2026-43776

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysrrtak2j 2026-07-28 04:50:26+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:18:45+00:00|...

CVE-2026-66758

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnysl4cri2v...

CVE-2016-0304

creationtimestamp| type| source ---|---|--- 2026-07-27 22:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnxidsumb2v...

CVE-2026-56747

creationtimestamp| type| source ---|---|--- 2026-07-27 22:20:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrnwjsjoem2m...

CVE-2026-42016

creationtimestamp| type| source ---|---|--- 2026-07-27 22:15:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrnwcdjy562j 2026-07-31 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxud4e2ri25 2026-09-11 11:18:06+00:00| seen|...

CVE-2026-59239

creationtimestamp| type| source ---|---|--- 2026-07-27 21:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrntd4xjjg2i...

CVE-2026-59728

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-51235

creationtimestamp| type| source ---|---|--- 2026-07-27 21:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrnsibng2e22...

CVE-2026-40000

creationtimestamp| type| source ---|---|--- 2026-07-27 21:00:03+00:00| seen| https://t.me/GithubRedTeam/95414 2026-07-28 00:00:06+00:00| seen| Telegram/Z8MJvZKIEcDmGh4i1fEO99rb4U3MajnIQlHtygmI2wCAmPc 2026-07-28 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95414 2026-07-2...

CVE-2017-8613

creationtimestamp| type| source ---|---|--- 2026-07-27 20:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnqrqzvfx22...

crowdsec v1.8.0-rc1

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

CVE-2026-17530

creationtimestamp| type| source ---|---|--- 2026-07-27 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17530...

CVE-2014-2029

creationtimestamp| type| source ---|---|--- 2026-07-27 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnp45chzd2m...

CVE-2026-59728 @astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...