PT-2026-63586

If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...

PT-2026-64019

Name of the Vulnerable Software and Affected Versions Logto affected versions not specified Description Logto fails to validate the SAML element. This allows attackers to remove time and audience restrictions, which enables the indefinite replay of assertions. SAML Security Assertion Markup...

The vulnerability of the ocxl_file_register_afu() function in the drivers/misc/ocxl/file.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-65016

creationtimestamp| type| source ---|---|--- 2026-07-22 22:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbfd46p2i2j 2026-07-27 19:18:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmfzh6ff2o...

CVE-2025-60835

creationtimestamp| type| source ---|---|--- 2026-07-22 21:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbctjcuje2q...

GO-2026-6057 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface in code.gitea.io/gitea

Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth X-Gitea-OTP surface in code.gitea.io/gitea...

CVE-2026-61207

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sutips2j 2026-07-23 18:17:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

MAL-2026-10993 Malicious code in torch-musa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc7f99306afb7d31dab4c2ca32f2feb984bcdc505cf1dc6c3ee736cd21f9bcc9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GHSA-G3R5-9H93-4J2C n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

CVE-2026-13187

creationtimestamp| type| source ---|---|--- 2026-07-22 17:18:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrategwpze2g...

CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...

CVE-2026-64834

FFmpeg 0.6.3–8.1.2 contains an infinite loop DoS in the RTP/ASF demuxer (libavformat/rtpdec_asf.c). The rtp_asf_fix_header function does not validate a minimum chunksize when iterating ASF objects, so when a chunksize is smaller than the 24-byte ASF header, the loop pointer fails to advance, caus...

CVE-2026-11605

creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 19:01:40+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o...

CVE-2026-59678

creationtimestamp| type| source ---|---|--- 2026-07-22 16:26:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mraqhvveol26...

CERTFR-2026-ALE-008

creationtimestamp| type| source ---|---|--- 2026-07-22 15:03:13+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116964235036563174...

GHSA-537C-GMF6-5CCF

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

CVE-2026-50251

creationtimestamp| type| source ---|---|--- 2026-07-22 14:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrajb6qfzh2o...

CVE-2026-42955

In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost domain window by up to one cached TTL configured value for A/AAAA glue records. Similar to other...

CVE-2026-42955

In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost domain window by up to one cached TTL configured value for A/AAAA glue records. Similar to other...

CVE-2026-42955

In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost domain window by up to one cached TTL configured value for A/AAAA glue records. Similar to other...