CVE-2026-8699

creationtimestamp| type| source ---|---|--- 2026-07-03 08:29:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq4wosesc2q 2026-07-03 09:35:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaneczhb27...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the curleasycleanup process after configuring an HTTP/2 stream-dependency tree using CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE and invoking curleasyreset. An attacker can cause the application to access freed memor...

CVE-2026-11778

The The CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.2.14. This is due to the software allowing users to execute an action that does not properly validate a value...

EUVD-2026-41521

The The CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.2.14. This is due to the software allowing users to execute an action that does not properly validate a value...

CVE-2026-10536

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

CVE-2026-12734

creationtimestamp| type| source ---|---|--- 2026-07-03 06:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppwolplpz2h 2026-07-03 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mppytfkyxp2z 2026-07-03 19:25:49+00:00| seen|...

CVE-2026-12729

creationtimestamp| type| source ---|---|--- 2026-07-03 06:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mppvi4utaj27 2026-07-03 06:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppvtqe2el2h 2026-07-03 19:25:00+00:00| seen|...

EUVD-2026-41501

Successfully using libcurl to do a transfer to a specific HTTP origin hostA with Digest authentication and then changing the origin to a different one hostB for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Authorization: header field meant for hostA, to hostB...

CVE-2026-10536

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree using CURLOPT_STREAM_DEPENDS or CURLOPT_STREAM_DEPENDS_E. If the application subsequently calls curl_easy_reset() and then curl_easy_cleanup(), libcurl attempts to access and modify an...

CVE-2026-10536 HTTP/2 stream-dependency tree UAF

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

EUVD-2026-41497

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

CVE-2026-10536 HTTP/2 stream-dependency tree UAF

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

CVE-2026-10140

creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.1-2.hum1 aarch64, x8664 nodejs22-bin-22.23.1-2.hum1 noarch nodejs22-devel-22.23.1-2.hum1 aarch64, x8664 nodejs22-docs-22.23.1-2.hum1 noarch...

CVE-2026-53357

creationtimestamp| type| source ---|---|--- 2026-07-03 04:37:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116854189956800499 2026-07-03 07:14:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyqck3e627 2026-07-04 03:44:19+00:00| seen|...

CVE-2026-8489 Ultimate Member <= 2.11.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Non-HTML Custom Textarea Profile Field

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aboutme' parameter in all versions up to, and including, 2.11.4 due to insufficient input sanitization and...

SUSE CVE-2026-53339

In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...

SUSE CVE-2026-54428

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2...

SUSE CVE-2026-55577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in...

GHSA-84HP-MQVJ-3P8H

creationtimestamp| type| source ---|---|--- 2026-07-03 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853809243699371 2026-07-03 03:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mppkkiqr622k...