CVE-2026-57266

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

CVE-2026-57266 GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

EUVD-2026-41228

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

CVE-2026-57266

GeoWebPlayer (Websocket Server component used by GV-VMS/GV-Cloud) contains multiple index-out-of-bounds vulnerabilities in its websocket command handling, allowing an attacker-supplied index to access arrays and trigger out-of-bounds reads/writes or call out-of-bounds function pointers. Documente...

GHSA-8JR5-V98P-W75M vulnerabilities

Vulnerabilities for packages: vllm-cuda-13.2, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, vllm-openai-cuda-13.0...

CVE-2026-14126

creationtimestamp| type| source ---|---|--- 2026-07-02 01:47:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvz5xngw23 2026-07-02 01:47:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvz65g2s26 2026-07-02 08:18:48+00:00| seen|...

CVE-2026-14076

creationtimestamp| type| source ---|---|--- 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvunbqlz22 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvun6jo72s 2026-07-02 07:51:36+00:00| seen|...

[SECURITY] Fedora 43 Update: caddy-2.10.2-9.fc43

Caddy is an extensible server platform that uses TLS by default...

CVE-2026-6283

creationtimestamp| type| source ---|---|--- 2026-07-02 00:37:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpms4bf2cf2t 2026-07-02 01:19:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmugd4fp32o 2026-07-02 01:55:27+00:00| seen|...

CVE-2026-14425

creationtimestamp| type| source ---|---|--- 2026-07-02 00:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqnx5sqz2p 2026-07-02 01:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpmth33zkl2b 2026-07-02 04:46:12+00:00| seen|...

CVE-2026-14078

creationtimestamp| type| source ---|---|--- 2026-07-02 00:04:51+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmqbczrfn2f 2026-07-02 00:04:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmqbdydc42o 2026-07-02 07:51:41+00:00| seen|...

PT-2026-55378

Impact In JSONata = 2.2.0 via fixes that include https://github.com/jsonata-js/jsonata/pull/782 and https://github.com/jsonata-js/jsonata/pull/793. Applications that evaluate user-provided expressions should update ASAP to prevent exploitation. References...

PT-2026-55022

Subscriber Server Side Request Forgery SSRF in GeoDirectory = 2.8.161 versions...

TencentOS Server 2: audiofile (TSSA-2025:1025)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1025 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

PT-2026-54965

Unauthenticated Cross Site Scripting XSS in Artale | Wedding Photography WordPress = 2.2.2 versions...

PT-2026-55030

Subscriber Broken Access Control in Werkstatt = 4.7.2 versions...

PT-2026-55344

Summary An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints utilizing API Platform. Under certain conditions, roles configured with owner-scope restrictions such as viewown or editown are not properly enforced. This allows low-privilege authenticated API users to bypass...

PT-2026-55012

Subscriber Broken Access Control in Advanced Contact form 7 DB = 2.0.9 versions...

PT-2026-54996

Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...

PT-2026-55875

Name of the Vulnerable Software and Affected Versions PHP version 8.2 Description A failure to establish a TLS handshake the process where a client and server authenticate each other and establish encryption keys with a remote server can lead to a Denial of Service DoS condition. Recommendations ...