JLSEC-2026-1098

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute is affected by an unauthenticated Denial of Service via unbounded activity_timeline range. The /activity_timeline endpoint accepts a user-controlled days parameter not restricted to a reasonable range, allowing remote attackers to request data over an arbitrarily long period. This c...

EUVD-2026-52255

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

PT-2026-67340

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-16063

The Event Booking Manager for WooCommerce WordPress plugin (versions before 5.3.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise or escape event timeline content submitted by users with post-editing access before the data is stored ...

CVE-2026-16063: Improper Neutralization of Input During Web Page Generation

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing users with the Author role and above to inject arbitrary...

CVE-2026-65891

creationtimestamp| type| source ---|---|--- 2026-07-29 14:56:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ol56cs27 2026-08-10 16:00:03+00:00| seen| https://t.me/GithubRedTeam/97449 2026-08-11 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97449...

CVE-2012-2661

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://t.me/CVEhub/13388 2026-07-30 00:00:55+00:00| seen| https://t.me/CVEhub/13388 2026-07-31 00:00:10+00:00| published-proof-of-concept| https://t.me/CVEhub/13388 2026-08-02 11:55:16+00:00| seen|...

CVE-2026-58179

creationtimestamp| type| source ---|---|--- 2026-07-29 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrszuuitx2z 2026-07-30 09:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mru4hhitrt2s 2026-07-30 16:34:03+00:00| seen|...

CVE-2026-15226

creationtimestamp| type| source ---|---|--- 2026-07-29 10:00:08+00:00| seen| https://t.me/sysodmins/29465 2026-07-30 00:02:06+00:00| seen| https://t.me/sysodmins/29465...

CVE-2026-58155

creationtimestamp| type| source ---|---|--- 2026-07-29 09:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrl7ln7ie2e 2026-07-29 11:19:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrskqlp422x 2026-08-04 22:07:07+00:00| seen|...

CVE-2026-51271

creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...

CVE-2026-14545

creationtimestamp| type| source ---|---|--- 2026-07-28 08:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxdaviyq2q 2026-07-28 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrpltsrhpu22...

CVE-2026-64450

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4gzu242k 2026-08-06 04:52:19+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00|...

GHSA-5PW9-F9R4-MV2R

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:09+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-27 00:00:47+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-28 00:00:40+00:00| seen| https://t.me/EchelonEyes/2791...