CVE-2026-58371 SeaweedFS < 4.30 - Cross-Origin Information Disclosure via Unvalidated JSONP callback Parameter

SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/javascript in the shared writeJson helper weed/server/common.go, with no callback-name validation, no X-Content-Type-Options: nosniff header, and no CORS allow-list. Every JSON...

CVE-2026-58371

SeaweedFS before 4.30 is vulnerable to cross-origin information disclosure via an unvalidated JSONP callback parameter. The shared writeJson helper can reflect the callback verbatim into responses served as application/javascript without callback-name validation, missing X-Content-Type-Options: n...

MINI-6939-C56M-MHC9

Bulletin has no description...

MINI-5MVV-94R6-WX2X

Bulletin has no description...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2022-24812

creationtimestamp| type| source ---|---|--- 2026-06-30 10:51:46+00:00| seen| https://infosec.exchange/users/certvde/statuses/116838675578498232...

EDB-50321

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:07+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5772856-05e8-4057-9431-7fa5d570eab3...

MINI-F56M-6PF7-HJ95

Bulletin has no description...

SUSE CVE-2026-31323

unknown...

SUSE CVE-2026-48804

unknown...

Linux Distros Unpatched Vulnerability : CVE-2026-10098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCSP CertID serial-number length-confusion in wolfSSLOCSPrespfindstatus allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be...

CVE-2026-56968

creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

CVE-2026-57947

creationtimestamp| type| source ---|---|--- 2026-06-29 18:33:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4skkzjk25 2026-06-29 21:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfujgoba2o 2026-06-29 21:53:41+00:00| seen|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

GHSA-37R3-Q4CW-F7GQ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...

GHSA-XC63-6253-WPXJ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/b0be586b08e26973675ce3d8f1a4a8da...

CVE-2026-13569

creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...

CVE-2026-10823

creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...