CVE-2026-57213

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

CVE-2026-15012

creationtimestamp| type| source ---|---|--- 2026-07-28 08:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozfdydns2s...

CVE-2026-15673

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'checkoutpaymentplans' and 'orderstatus' Settings in all versions up to, and including, 3.9.7 due to insufficient escaping on the user supplied...

CVE-2026-15673

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'checkoutpaymentplans' and 'orderstatus' Settings in all versions up to, and including, 3.9.7 due to insufficient escaping on the user supplied...

CVE-2026-15673

CVE-2026-15673 affects the WordPress plugin “SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery” up to version 3.9.7. It is a second‑order SQL Injection where insufficient escaping in the update_option‑stored values in checkout_payment_plans and order_status allo...

EUVD-2026-49712

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'checkoutpaymentplans' and 'orderstatus' Settings in all versions up to, and including, 3.9.7 due to insufficient escaping on the user supplied...

MikroTik RouterOS and Cloud Hosted Router

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

CVE-2026-64776

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:22+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:10+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:11+00:00| seen|...

CVE-2026-65442

creationtimestamp| type| source ---|---|--- 2026-07-28 00:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5s5l3hl2s...

CVE-2026-64555 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

EUVD-2026-49606

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

GHSA-HRXH-6V49-42GF

creationtimestamp| type| source ---|---|--- 2026-07-27 19:48:38+00:00| seen| https://gist.github.com/allanrogerr/6d10196ab8eb0d80a2cfca871b45d9a8 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j...

GHSA-93WV-JW9V-4972

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3345 2026-07-28 00:00:32+00:00| published-proof-of-concept| https://t.me/bdufstecru/3345...

CVE-2026-56820

A flaw was found in Netty. The OcspClient component fails to validate that the Certificate ID in an Online Certificate Status Protocol OCSP response matches the requested Certificate ID. This vulnerability allows a remote attacker to bypass certificate revocation checks by presenting a legitimate...

MINI-GF9M-WP63-C7H7

Bulletin has no description...

MINI-695H-F8HX-WRX9

Bulletin has no description...

CVE-2026-64531

creationtimestamp| type| source ---|---|--- 2026-07-27 08:12:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990931091139348 2026-07-28 10:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrp7jnvcfc2l 2026-07-28 11:12:13+00:00| seen|...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y...

CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...