MINI-GQ4X-M265-2QRP

Bulletin has no description...

CVE-2026-41688

Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname but passes the original hostname to cURL without CURLOPTRESOLVE pinning on 10 of 11 outbound HTTP endpoints, leaving a DNS...

USN-8253-1 postfix vulnerability

Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service...

USN-8253-1: Postfix vulnerability

Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service...

CVE-2026-41688

Wallos (versions ≤ 4.8.4) has an incomplete SSRF fix: the webhook URL is validated with gethostbyname(), but the original hostname is passed to curl without CURLOPT_RESOLVE pinning on 10 of 11 outbound HTTP endpoints, creating a DNS rebinding TOCTOU window. At publication, no patches are availabl...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail" Safe Detection Script A read-o...

BIT-APACHE-2026-29168 Apache HTTP Server: mod_md unrestricted OCSP response

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

Apache HTTP Server: mod_md unrestricted OCSP response

...

Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line

...

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

...

CVE-2026-43090

creationtimestamp| type| source ---|---|--- 2026-05-07 08:04:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116532251574592578...

GHSA-FRH3-6PV6-RC8J

creationtimestamp| type| source ---|---|--- 2026-05-07 06:10:29+00:00| seen| https://gist.github.com/alon710/560a262a37ded8b644e3892d54c879bb...

GHSA-C67R-GC9J-2QF7

creationtimestamp| type| source ---|---|--- 2026-05-07 05:10:29+00:00| seen| https://gist.github.com/alon710/536c02534caf441e3d6307e9b3c04050...

GHSA-375F-4R2H-F99J

creationtimestamp| type| source ---|---|--- 2026-05-07 04:40:29+00:00| seen| https://gist.github.com/alon710/4ff6ed1a1dcb2ad425666d3faacd2bcb...

GHSA-Q6V9-R226-V65F

creationtimestamp| type| source ---|---|--- 2026-05-07 04:10:29+00:00| seen| https://gist.github.com/alon710/60dab51279f6b991c4df239e6fd329b2...

GHSA-MMPX-JH39-WRV6

creationtimestamp| type| source ---|---|--- 2026-05-07 03:40:29+00:00| seen| https://gist.github.com/alon710/14822427e82604da5dce18ab5080ddb7...

SUSE CVE-2026-43119

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: annotate data-races around hdev-reqstatus hcicmdsyncsk sets hdev-reqstatus under hdev-reqlock: hdev-reqstatus = HCIREQPEND; However, several other functions read or write hdev-reqstatus without holding any loc...

PT-2026-39180

Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service...

WordPress plugin Forminator Forms has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Linux Distros Unpatched Vulnerability : CVE-2026-7990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege...