CVE-2026-63793

creationtimestamp| type| source ---|---|--- 2026-07-20 09:51:04+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2zg43uph2m 2026-07-20 09:52:04+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2zhvywzh2l 2026-07-20 09:52:07+00:00| seen|...

CVE-2026-53388

creationtimestamp| type| source ---|---|--- 2026-07-20 04:55:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116950519672202204 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-64030

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is 0x000f, so linkid extracted from a PRIOACCESS ML element PERSTAPROFILE subelement can be 0..15. sdata-link has IEEE80211MLDMAXNUMLINKS 15...

CVE-2026-63886

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAPR length before base64 decode chapservercomputehash allocates clientdigest as kzallocchap-digestsize and then, for BASE64-encoded responses, passes chapr directly to chapbase64decode without...

UBUNTU-CVE-2026-64087

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

DEBIAN-CVE-2026-64149

In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dmamapresource sanity check into debug code dmamapresource uses pfnvalid to ensure the range is not RAM. However, pfnvalid only checks for availability of the memory map for a PFN but it does not ensure that the...

DEBIAN-CVE-2026-64090

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 "batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs" added checks to the local direct TT response code. But the response can also be done...

DEBIAN-CVE-2026-64063

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "streaming writes" in which dirty data is stored directly into folios without reading them first. Such folios are marked...

DEBIAN-CVE-2026-64038

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Stop work before releasing hwmon device Sashiko reports: In lm90probe, the devm action to cancel the alertwork and reportwork lm90restoreconf is registered in lm90initclient before devmhwmondeviceregisterwithinfo is...

DEBIAN-CVE-2026-64026

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...

CVE-2026-16228 SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /editschoolyr.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-16228

The CVE-2026-16228 entry concerns SourceCodester Class and Exam Timetabling System 1.0. An unknown function in /edit_schoolyr.php is vulnerable to SQL injection when the ID parameter is manipulated. The vulnerability can be exploited remotely, and public exploits have been reported. Affected soft...

CVE-2026-16228

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /editschoolyr.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-16204

creationtimestamp| type| source ---|---|--- 2026-07-19 04:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxvfhdeg427...

CVE-2026-46420

creationtimestamp| type| source ---|---|--- 2026-07-19 00:00:08+00:00| seen| https://t.me/GithubRedTeam/94056 2026-07-20 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94056 2026-07-20 18:00:05+00:00| seen| Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc 2026-07-2...

CVE-2026-16155 SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /schoolyr.php. The manipulation of the argument sy leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is...

CVE-2026-16128

creationtimestamp| type| source ---|---|--- 2026-07-18 20:09:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqx32rvz6z23...

CVE-2025-71392

creationtimestamp| type| source ---|---|--- 2026-07-18 14:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwifwlwk22v 2026-07-18 15:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwmqt6lrc2q 2026-07-20 04:24:04+00:00| seen|...

CVE-2026-7872

creationtimestamp| type| source ---|---|--- 2026-07-18 12:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw7quhq3m2a...

CVE-2026-62299

creationtimestamp| type| source ---|---|--- 2026-07-18 10:38:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p 2026-07-18 10:38:31+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l 2026-07-18 10:38:34+00:00| seen|...