UBUNTU-CVE-2026-65912

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...

CVE-2026-60150

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-16317

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yw4265r2a 2026-07-22 13:13:59+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mrafotbn332r...

CVE-2026-60244

creationtimestamp| type| source ---|---|--- 2026-07-21 23:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy5huul2r 2026-07-23 16:49:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 21:37:06+00:00| seen|...

CVE-2026-44880

creationtimestamp| type| source ---|---|--- 2026-07-21 19:35:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kjqlhyq27 2026-07-22 14:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n...

CVE-2026-28313

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...

CVE-2026-28304

creationtimestamp| type| source ---|---|--- 2026-07-21 16:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a2yshpb2v 2026-07-26 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkzmbga6l23...

CVE-2026-15927

creationtimestamp| type| source ---|---|--- 2026-07-21 10:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5mblx7vf23...

CVE-2026-63770

creationtimestamp| type| source ---|---|--- 2026-07-20 21:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bkfaom222...

CVE-2026-56623

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr46seddce2x 2026-07-20 21:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bwrjqod2q...

CVE-2026-41521

creationtimestamp| type| source ---|---|--- 2026-07-20 20:54:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46icr4di2a 2026-07-23 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrciecdpch2l...

CVE-2026-64190

creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3w3ubzed22...

CVE-2026-44227 RT: Reflected Cross-Site Scripting via URL parameters

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

CVE-2026-44227 RT: Reflected Cross-Site Scripting via URL parameters

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

CERTFR-2026-ALE-007

creationtimestamp| type| source ---|---|--- 2026-07-20 08:52:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116951452309188132...

CVE-2026-13147 Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis

The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts Server-Side Request Forgery...

CVE-2026-16211

creationtimestamp| type| source ---|---|--- 2026-07-19 08:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b...

CVE-2026-16133

creationtimestamp| type| source ---|---|--- 2026-07-18 20:19:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqx3moyuxa2q...

CVE-2026-50274

creationtimestamp| type| source ---|---|--- 2026-07-18 05:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvicwsojf2f 2026-07-19 14:01:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqywwbtptl2t 2026-07-19 14:01:07+00:00| seen|...

PT-2026-60974

A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw net get/claw net post of the file claw/tools/tool net.c of the component http request. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote...