CVE-2026-60298

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yuxnwyy2j 2026-07-23 16:51:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60292

creationtimestamp| type| source ---|---|--- 2026-07-21 23:48:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynsyrfe2v 2026-07-23 16:50:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 17:07:07+00:00| seen|...

CVE-2026-60288

creationtimestamp| type| source ---|---|--- 2026-07-21 23:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ygnmrgp24 2026-07-23 16:50:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 16:07:06+00:00| seen|...

CVE-2026-60286

creationtimestamp| type| source ---|---|--- 2026-07-21 23:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yd2yztu2r 2026-07-23 16:50:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 15:07:06+00:00| seen|...

CVE-2026-60279

creationtimestamp| type| source ---|---|--- 2026-07-21 23:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6y7gvv2h2v 2026-07-23 16:50:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60272

creationtimestamp| type| source ---|---|--- 2026-07-21 23:34:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xurqovh24 2026-07-23 16:50:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 08:37:06+00:00| seen|...

CVE-2026-60269

creationtimestamp| type| source ---|---|--- 2026-07-21 23:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xuqd6w42a 2026-07-23 16:50:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60264

creationtimestamp| type| source ---|---|--- 2026-07-21 23:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k 2026-07-23 16:50:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 10:37:07+00:00| seen|...

CVE-2026-60258

creationtimestamp| type| source ---|---|--- 2026-07-21 23:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xjzmfxy2y 2026-07-23 16:49:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 11:07:07+00:00| seen|...

CVE-2026-60249

creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 23:07:07+00:00| seen|...

CVE-2026-10680

creationtimestamp| type| source ---|---|--- 2026-07-21 23:15:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6wt5uxig2e...

CVE-2026-60239

creationtimestamp| type| source ---|---|--- 2026-07-21 23:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wqz5oek2u 2026-07-23 16:49:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 12:37:07+00:00| seen|...

CVE-2026-60209

creationtimestamp| type| source ---|---|--- 2026-07-21 23:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wga6kjz2v 2026-07-23 16:48:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 06:07:07+00:00| seen|...

CVE-2026-60204

creationtimestamp| type| source ---|---|--- 2026-07-21 23:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6w72shx722 2026-07-23 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 20:07:06+00:00| seen|...

CVE-2026-60230

creationtimestamp| type| source ---|---|--- 2026-07-21 22:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u6oskys2z 2026-07-23 16:48:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 04:07:07+00:00| seen|...

CVE-2026-60226

creationtimestamp| type| source ---|---|--- 2026-07-21 22:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6txkwoum2v 2026-07-23 16:48:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 02:07:07+00:00| seen|...

CVE-2026-65318

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can...

GHSA-V2HH-GCRM-F6HX fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact fast-uri v4.1.0 and earlier do not treat a literal backslash U+005C as an authority delimiter. Node's native WHATWG URL used by fetch, undici, and Node's http/https clients normalizes \ to / for special schemes http, https, ws, wss, ftp, file, so the two parsers extract different hosts fro...

fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact fast-uri v4.1.0 and earlier do not treat a literal backslash U+005C as an authority delimiter. Node's native WHATWG URL used by fetch, undici, and Node's http/https clients normalizes \ to / for special schemes http, https, ws, wss, ftp, file, so the two parsers extract different hosts fro...

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...