PT-2026-73338

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

The vulnerability of the audit_classes_init() function in the lib/audit.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the auditclassesinit function in the lib/audit.c module of the Linux kernel is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

MINI-6H7F-QMV6-8R3M

Bulletin has no description...

MINI-3JGX-7FWG-Q797

Bulletin has no description...

MINI-H6XJ-3PQG-FHQ5

Bulletin has no description...

MINI-RJQH-JPJ8-G5CH

Bulletin has no description...

MINI-6493-XMCM-VR5G

Bulletin has no description...

MINI-954M-5XF3-PG85

Bulletin has no description...

CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-59503

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Sof...

EUVD-2026-57770

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

PT-2026-71568

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

Malicious code in twcvhjlksdmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b37bf3e91951e089b31d7aa6d31834fef110ba5bfc1c8c3cb09e701c9c1878 The tarball contains only package.json and index.html. package.json declares no preinstall/install/postinstall/prepare lifecycle hooks and sets main ...

CVE-2026-47231: Authorization Bypass Through User-Controlled Key

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The GOSTCTR implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the G3413CTRBlockCiphe...

Valve warns Steam hardware buyers: Expect fake delivery scams

Most of us are wise to phishing emails that don't contain much personal information. Generic "your account is suspended" messages usually get binned on sight. But what about the phishing emails that use your real name and address, and reference the specific product you bought last month? Even for...

EUVD-2026-55634

Authorization Bypass Through User-Controlled Key in the contact management component in Roskus Prospero Flow CRM before 5.4.8 allows authenticated users of any company to blindly overwrite the contact data of another company and to download that contact's personal data as a vCard via the contact'...

WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by adhikara13 in WordPress Plugin WooCommerce Appointments versions = 5.3.8...

The vulnerability of the ceph_handle_auth_reply() function in the net/ceph/auth.c module of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and accessibility of...

CVE-2026-72719: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...