CVE-2026-21383

creationtimestamp| type| source ---|---|--- 2026-07-07 16:45:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-9 2026-07-16 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

LNbits improperly handles potential network and payment failures when using Eclair backend

SummaryPaying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. DetailsUsing blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

PYSEC-2026-1580 LNbits improperly handles potential network and payment failures when using Eclair backend

Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

GHSA-V5WF-J8J4-77H7

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgei5er2s...

GHSA-V64M-XXFW-HRV6

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...

GHSA-X76W-8C62-48MG

creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:52+00:00| seen| https://gist.github.com/alon710/b825af035610849f3142d75d4e2989fc...

CVE-2026-55379

creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...

GHSA-4X34-CHG5-MWJJ chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

In Chmoder::chmod the recursive branch overwrites the running result instead of accumulating it, so the exit code reflects only the last file processed: if self.recursive r = self.walkdirwithcontextfile, true; // overwrites r else r = self.chmodfilefile.andr; PoC: GNU returns 1 when a file fails;...

CVE-2026-24012

creationtimestamp| type| source ---|---|--- 2026-07-06 19:14:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyseyhbm32c...

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

SUSE-SU-2026:2781-1 Security update for postfix

This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...

Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

CVE-2025-29329

creationtimestamp| type| source ---|---|--- 2026-07-06 11:07:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxx55vsds2i...

MINI-PP3C-H8V7-6M4M

Bulletin has no description...

CVE-2026-14798

creationtimestamp| type| source ---|---|--- 2026-07-06 08:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxoyfymn62b 2026-07-08 16:12:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j4raelr2d...

OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

PYSEC-2026-816 OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...