Apache Tomcat 9.0.13 < 9.0.120 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.120. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.120security-9 advisory. - Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to secure...

PT-2026-57967

The WP 2FA WordPress plugin before 3.1.1.2 does not verify that the email address supplied during two-factor authentication setup belongs to the user, allowing an attacker who has obtained a user's credentials to redirect the setup verification code to an attacker-controlled email address and tak...

CVE-2026-51105

A Buffer Overflow vulnerability exists in aMULE-Project aMule v.2.3.3 . A remote attacker can exploit the OP_SERVERMESSAGE Handler to cause a denial of service . While some Linux distributions are noted to have this package installed without a vendor-supplied patch, specific remediation steps or ...

PT-2026-58915

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable replay could deliver messages whose original topics matched a subscriber configured subscribe deny rule because these...

Adobe Media Encoder < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-72)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-72 advisory. - Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

EulerOS 2.0 SP10 : gdk-pixbuf2 (EulerOS-SA-2026-2648)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper...

openSUSE 16 Security Update : tiff (openSUSE-SU-2026:21289-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21289-1 advisory. This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF...

GHSA-C67F-GMXW-MJ93 FacturaScripts: Account takeover of any 2FA-enabled user

Authentication bypass in FacturaScripts: /login?action=two-factor-validation accepts brute-forceable TOTP without password or CSRF protection Summary Core/Controller/Login.php::twoFactorValidationAction accepts an unauthenticated POST containing only fsNick and fsTwoFactorCode. If the TOTP value...

FacturaScripts: Account takeover of any 2FA-enabled user

Authentication bypass in FacturaScripts: /login?action=two-factor-validation accepts brute-forceable TOTP without password or CSRF protection Summary Core/Controller/Login.php::twoFactorValidationAction accepts an unauthenticated POST containing only fsNick and fsTwoFactorCode. If the TOTP value...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the twoFactorValidationAction process. An attacker can gain unauthorized access to any 2FA-enabled user account, including administrative accounts, by sending unauthenticated POST requests containing only the...

CVE-2026-48364

creationtimestamp| type| source ---|---|--- 2026-07-13 22:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m 2026-07-13 22:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l 2026-07-19 17:37:06+00:00| seen|...

CVE-2026-62327

creationtimestamp| type| source ---|---|--- 2026-07-13 21:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkogyu3uw2v 2026-07-13 23:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkslpine22x 2026-07-14 00:00:38+00:00| seen|...

OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files

A flaw was found in OpenEXR. A remote attacker could exploit a vulnerability in the IDManifest::init function when processing specially crafted EXR files. The function attempts to reconstruct strings from a prefix-compressed representation. If a previous string exceeds 255 bytes, the subsequent...

CVE-2026-49970

creationtimestamp| type| source ---|---|--- 2026-07-13 18:52:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkefsdmh627 2026-07-13 19:40:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkh3wqres2s 2026-07-13 20:01:37+00:00| seen|...

CVE-2026-61462

creationtimestamp| type| source ---|---|--- 2026-07-13 18:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqke5w7ni22d 2026-07-13 19:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkexp5qxn2t 2026-07-14 04:01:23+00:00| seen|...

Security update for curl

This update for curl fixes the following issues CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409. CVE-2026-8927: env-set cross-proxy Digest auth state leak bsc1268413...

SUSE-SU-2026:2925-1 Security update for curl

This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie...

CVE-2026-59245

creationtimestamp| type| source ---|---|--- 2026-07-13 17:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkb4bifd22w 2026-07-13 18:20:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcm5c5tr2t...

CVE-2026-58065

creationtimestamp| type| source ---|---|--- 2026-07-13 17:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkatd3dmc2x 2026-07-13 18:15:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcd6u55r2f 2026-07-13 22:10:25+00:00| seen|...

CVE-2026-13221

creationtimestamp| type| source ---|---|--- 2026-07-13 17:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkakeohr427 2026-07-13 18:30:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkd626fd62t 2026-07-14 14:44:05+00:00| seen|...