SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

GHSA-3G8J-6HFM-WJ7G vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-HFH9-QJ8M-JFFJ vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-2XCG-3JRG-6GJ2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JRRR-M467-89V4 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-8030 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-P97F-M8C4-2PVC vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-46244

creationtimestamp| type| source ---|---|--- 2026-07-01 02:34:29+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-02 06:52:32+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

Security update for freerdp (important)

openSUSE security update: security update for freerdp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21116-1 Rating: important References: bsc1174200 bsc1261217 bsc1261222 bsc1261223 bsc1261226 bsc1261227 bsc1262743 bsc1266317 bsc1267008 bsc1267009...

Inside the Advisory Database and what happens when vulnerability volume breaks records

In May 2026, the GitHub Advisory Database published 1,560 reviewed advisories --more than five times our typical monthly output and the highest in its history. And it still wasn't enough to keep up. Over the past few months, the vulnerability ecosystem has shifted in a fundamental way. Input acro...

curl: ssh_config_matches is dead code: unauthorized SSH key reuse

Summary libcurl's SSH connection-reuse guard sshconfigmatches — added for CVE-2022-27782 and reaffirmed by CVE-2023-27538 — is dead code in every release since 7.83.1. It compares sshc-rsa / sshc-rsapub between a new transfer "needle" and a pooled connection, but on both sides those pointers are...

GHSA-PW6J-QG29-8W7F vulnerabilities

Vulnerabilities for packages: mitmproxy, airflow...

Cisco Advance Notification for Publication of July 1, 2026, Security Advisories

On July 1, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE-ID Security Impact Rating CVSS Base Score Cisco Catalyst Center Arbitrary File Read Vulnerability...

CVE-2026-55775

creationtimestamp| type| source ---|---|--- 2026-06-19 11:28:42+00:00| published-proof-of-concept| https://github.com/openbao/openbao/security/advisories/GHSA-mwr2-wmgp-crj6...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.12.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

CVE-2026-55471

creationtimestamp| type| source ---|---|--- 2026-06-17 13:06:00+00:00| published-proof-of-concept| https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-2f55-g35j-5jmf...

CVE-2026-55448

creationtimestamp| type| source ---|---|--- 2026-06-12 17:40:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph 2026-06-26 18:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lljtyfl2l...

PT-2026-48870

Name of the Vulnerable Software and Affected Versions remotion version 4.0.409 Description A remote code execution RCE issue was discovered, which allows an attacker to execute arbitrary code on the target system. Recommendations At the moment, there is no information about a newer version that...

PT-2026-48871

Name of the Vulnerable Software and Affected Versions remotion version 4.0.409 Description An arbitrary file write issue exists, allowing an attacker to write files to an unintended location on the system. Recommendations At the moment, there is no information about a newer version that contains ...