PYSEC-2026-681 Unrestricted Upload of File with Dangerous Type in motionEye

motionEye = 0.42.1 and motioneEyeOS = 20200606 allow a remote attacker to upload a configuration backup file containing a malicious python pickle file. This is possible when an installation is accessible over the Internet and uses no or poor authentication credentials. The GitHub repositories for...

MINI-R3H5-Q4H6-62PF

Bulletin has no description...

CVE-2026-11781

creationtimestamp| type| source ---|---|--- 2026-07-02 08:06:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnl6jad272p 2026-07-02 20:08:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotjnx4ny2n...

CVE-2026-5821

creationtimestamp| type| source ---|---|--- 2026-07-02 07:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkd3ji6c2n 2026-07-02 20:13:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpots6j3lb2k...

CVE-2026-14126

creationtimestamp| type| source ---|---|--- 2026-07-02 01:47:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvz5xngw23 2026-07-02 01:47:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvz65g2s26 2026-07-02 08:18:48+00:00| seen|...

CVE-2026-14154

creationtimestamp| type| source ---|---|--- 2026-07-02 01:11:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtytnzvz2q 2026-07-02 08:22:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:48:37+00:00| seen|...

CVE-2026-14419

creationtimestamp| type| source ---|---|--- 2026-07-02 00:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpyz4dpi2s 2026-07-02 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116847792934953006 2026-07-02 01:30:27+00:00| seen|...

php security update

8.0.30-6 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale SOAPGLOBALrefmap pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAPPERSISTENCESESSION...

Linux Distros Unpatched Vulnerability : CVE-2026-48029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induce...

openSUSE 16: stgit / stgit-bash-completion / stgit-emacs / stgit-fish-completion / etc (openSUSE-SU-2026:21185-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21185-1 advisory. Changes in stgit: - Update to version 2.6.0: chore: update changelog for 2.6.0 fiximport: respect --name verbatim, ignoring stgit.namelength testrefresh...

Linux Distros Unpatched Vulnerability : CVE-2026-47714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer...

Oracle Linux 9 : php (ELSA-2026-33449)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33449 advisory. - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale...

MINI-JP83-8J64-34FQ

Bulletin has no description...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connected-components when invalid arguments are provided. An attacker can cause the application to enter an infinite loop by supplying specially crafted input. Remediation A fi...

CVE-2026-14003

creationtimestamp| type| source ---|---|--- 2026-07-01 21:18:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgx5prmj26 2026-07-02 04:22:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6n7qcb32u 2026-07-02 07:48:58+00:00| seen|...

CVE-2026-13826

creationtimestamp| type| source ---|---|--- 2026-07-01 19:46:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbtkbi3d2y 2026-07-02 07:20:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

ECHO-C794-855A-314D

Bulletin has no description...

CVE-2026-58036

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php,...

CVE-2026-11380

creationtimestamp| type| source ---|---|--- 2026-07-01 12:47:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkfad56s26 2026-07-01 22:03:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjioyorz2t 2026-07-04 13:15:07+00:00| seen|...