CVE-2026-42536

creationtimestamp| type| source ---|---|--- 2026-06-08 22:00:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsolmbovy2r 2026-06-08 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsrxlori626 2026-06-09 00:51:01+00:00| seen|...

PT-2026-50588

Name of the Vulnerable Software and Affected Versions OpenSlide versions 3.4.1 through 4.0.0 Description The parse level0 xml function in src/openslide-vendor-ventana.c fails to properly validate row or column tile counts when processing crafted Ventana BIF files. By providing nonpositive counts,...

Important: tomcat10

Issue Overview: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are...

Important: tomcat9

Issue Overview: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are...

Important: tomcat

Issue Overview: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are...

MINI-Q6X3-GG7F-2JH6

Bulletin has no description...

PT-2026-50581

Name of the Vulnerable Software and Affected Versions HTML::Gumbo versions prior to 0.19 Description Type confusion occurs when the walk tree function in lib/HTML/Gumbo.xs fails to properly handle the element. This element is incorrectly treated as a text node, causing strlen to over-read the hea...

BIT-DJANGO-2026-8404 Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their...

Exploit for CVE-2026-48595

CVE-2026-48595 - elixir-tesla tesla Vulnerability Quick Us...

CVE-2026-7565

creationtimestamp| type| source ---|---|--- 2026-06-06 04:39:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltjbl3h62d 2026-06-12 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo457oewae2b 2026-09-08 16:15:15+00:00| seen|...

PT-2026-60901

Name of the Vulnerable Software and Affected Versions Flask-Reuploaded versions prior to 1.5.1 Description An issue exists in the UploadSet.save function where the name parameter can be used to bypass extension denylists. When a user provides a name override, the system performs re-validation usi...

EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2026-2099)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line...

EulerOS Virtualization 2.10.0 : glib2 (EulerOS-SA-2026-2046)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types...

CVE-2026-43513

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks. Mitigation This vulnerability only affects Tomcat deployments using the LockOutRealm with a case-insensitive authentication backend. Deployments not using...

CVE-2026-44367

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service DoS and complete account...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

CVE-2026-41067

Astro is a web framework. Prior to 6.1.6, the defineScriptVars function in Astro's server-side rendering pipeline uses a case-sensitive regex //g to sanitize values injected into inline ,...

CVE-2026-42272

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall handles URL-encoded slashes %2F in a case-sensitive manner, while percent-encoding is defined to be case-insensitive. As a result, the lowercase equivalent %2f is not recognized...

CVE-2026-46392

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the saveFile endpoint validates upload extensions case-insensitively and writes the filename to disk verbatim, but the .htaccess rule that forces Content-Disposition: attachment on HTML...

CVE-2026-42273

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs host matching in a case-sensitive manner, while HTTP hostnames are case-insensitive. This discrepancy can result in heimdall failing to match a rule for a request host...