CVE-2026-59961

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-60103

creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...

CVE-2026-12271

creationtimestamp| type| source ---|---|--- 2026-07-14 03:14:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlai7m3x32c...

MAL-2026-10522 Malicious code in flick-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in flick-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-57371

creationtimestamp| type| source ---|---|--- 2026-07-14 01:08:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzgmybpb2c 2026-07-16 08:15:03+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs6qb47h2p...

EUVD-2026-43563

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...

PT-2026-58140

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description The use of an uninitialized resource allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At the moment,...

PT-2026-60091

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.58.0 Description The official Docker image includes a default environment variable APP SECRET set to a publicly known value. Because the Docker entrypoint does not validate or override this value, instances deployed...

PT-2026-58202

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

PT-2026-58158

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

KLA91153 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-58122

Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...

PT-2026-58135

Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A use-after-free condition exists in Windows App Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

GHSA-8F6J-263M-G72X Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

Summary SignedDataVerifier attempts to perform online revocation checking when enableonlinechecks=True, but its OCSP validation logic accepts stale GOOD responses as valid indefinitely. In appstoreserverlibrary/signeddataverifier.py, ChainVerifier.checkocspstatus verifies the OCSP response...

CVE-2026-62197

creationtimestamp| type| source ---|---|--- 2026-07-13 22:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkricfkio2z...

CVE-2026-62184

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...

CVE-2026-62184 luci-app-banip Log Monitor IP Extraction Bypass

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...

CVE-2026-62184

CVE-2026-62184 affects the OpenWrt luci-app-banip component. The issue is a log-parsing vulnerability in an awk-based parser that always extracts the first IPv4 address from a log line, regardless of its actual field position. An unauthenticated remote attacker can inject an IP address via attack...

CVE-2026-62184 luci-app-banip Log Monitor IP Extraction Bypass

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...