CVE-2026-49017

creationtimestamp| type| source ---|---|--- 2026-05-27 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116644303789823901 2026-05-27 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsjca6nvq2v 2026-05-27 05:00:31+00:00| seen|...

CVE-2025-43306

creationtimestamp| type| source ---|---|--- 2026-05-27 02:45:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmsihnwhmn2v 2026-05-27 04:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmpfgm3q2s...

CVE-2026-48959

IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward compares length $offset the digit count of the offset, 1 to 19 against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration...

CVE-2026-49017

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-server worker handling the request to become permanently...

CVE-2026-49017

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-server worker handling the request to become permanently...

[SECURITY] Fedora 42 Update: rust-sequoia-sop-0.37.3-3.fc42

An implementation of the Stateless OpenPGP Interface using Sequoia...

[SECURITY] Fedora 42 Update: rust-sequoia-sqv-1.3.0-6.fc42

A simple OpenPGP signature verification program...

[SECURITY] Fedora 42 Update: rust-sequoia-sq-1.3.1-11.fc42

Command-line frontends for Sequoia...

[SECURITY] Fedora 42 Update: rust-rpm-sequoia-1.10.2-2.fc42

An implementation of the RPM PGP interface using Sequoia...

[SECURITY] Fedora 42 Update: rust-sequoia-git-0.6.0-2.fc42

A tool for managing and enforcing a commit signing policy...

[SECURITY] Fedora 42 Update: rust-sequoia-octopus-librnp-1.11.1-6.fc42

Reimplementation of RNP's interface using Sequoia for use with Thunderbird...

CVE-2026-8647

creationtimestamp| type| source ---|---|--- 2026-05-27 00:32:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsazkwpzd2s 2026-05-27 01:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmscr5cl2r2v...

CVE-2026-46740

creationtimestamp| type| source ---|---|--- 2026-05-27 00:27:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsaqmimy72u 2026-05-27 00:58:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmscime3hs2q...

CVE-2026-9312

CVE-2026-9312 – GitHub Enterprise Server SSRF : An unauthenticated attacker could exploit insufficient input validation in an upload endpoint to inject path traversal and redirect internal API calls, potentially accessing internal services and sensitive credentials. Affected: all GitHub Enterpris...

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

PT-2026-44011

Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default...

WordPress plugin “Product Import Export for WooCommerce” has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

PT-2026-44089

pam usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates heap memory proportional to n devices, a count derived from libxml2 XPath evaluation of the config file, without first enforcing an upper bound. On 32-bit targets armv7l, i686 -...

PT-2026-43644

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Input Data Manipulation.This issue affects Ads by WPQuads: from n/a through = 3.0.2...

WordPress plugin QuickWebP has a path traversal vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...