CVE-2026-49771

creationtimestamp| type| source ---|---|--- 2026-06-04 10:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnhhsw4byz2g 2026-06-04 11:29:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhjhig4ny25 2026-06-15 15:16:11+00:00| seen|...

RHSA-2026:22551 Red Hat Security Advisory: mod_http2 security update

Bulletin has no description...

MINI-22CM-JR63-CG4R

Bulletin has no description...

CVE-2026-8653

creationtimestamp| type| source ---|---|--- 2026-06-04 06:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh2ebu35r2x 2026-06-04 11:14:43+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnhinduooq2s 2026-06-22 23:16:08+00:00| seen|...

Exploit for CVE-2026-49975

CVE-2026-49975 — HTTP/2 Bomb PoC !CVEhttps://img.shields...

CVE-2026-41859

creationtimestamp| type| source ---|---|--- 2026-06-04 05:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtrfyvy622 2026-06-04 07:23:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh3pdmm2g26...

CVE-2026-41010

creationtimestamp| type| source ---|---|--- 2026-06-04 05:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtr6jzac2d 2026-06-04 07:48:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh544edlf26...

CVE-2026-50219

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,...

CVE-2026-8829

creationtimestamp| type| source ---|---|--- 2026-06-04 03:05:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mngnckqkxo26 2026-06-04 07:09:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh2w6wc2n2p...

SUSE CVE-2026-7666

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a partially-initialized connection after a failed STARTTLS handshake when failsilently=True, which allows on-path network attackers to read ema...

SUSE CVE-2026-8404

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their...

SUSE CVE-2026-50052

In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack request smuggling, which in turn can be used for cache poisoning, authentication bypass, or possibly even information disclosure and...

[slackware-security] httpd

New httpd packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.67-i586-2slack15.0.txz: Rebuilt. This update fixes "HTTP/2 Bomb", a resource exhaustion denial-of-service attack against...

CVE-2026-10777

creationtimestamp| type| source ---|---|--- 2026-06-04 01:11:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnggx2rp4b2g 2026-06-04 02:57:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mngmuf4q332f...

CVE-2026-8722

creationtimestamp| type| source ---|---|--- 2026-06-04 01:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnggo4dgrl23 2026-06-04 01:20:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnghgns3a62j...

GHSA-49RJ-9FVP-4H2H

creationtimestamp| type| source ---|---|--- 2026-06-04 00:40:58+00:00| seen| https://gist.github.com/alon710/6d419a56b43f4ac63f23facb23062d82 2026-06-04 00:50:54+00:00| seen| https://gist.github.com/alon710/cecab85d181ca5255e1b29e5e5dd0f30...

CVE-2026-22054

creationtimestamp| type| source ---|---|--- 2026-06-04 00:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngf6vd4652m 2026-06-04 13:20:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpo4vr3n2o 2026-06-04 17:25:38+00:00| seen|...

PT-2026-46228

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authenticated API access to delete directories outside the configured cache path. This can cause arbitrary data loss and...

Linux Distros Unpatched Vulnerability : CVE-2026-42779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass...

AlmaLinux 10 : ruby4.0 (ALSA-2026:20606)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:20606 advisory. ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection CVE-2026-33210 erb: ERB: Arbitrary code execution via...