5535 matches found
GHSA-7WWH-XCC3-9FCG Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module
Summary The PayPal webhook endpoint /extensions/paypal/webhook processes the PAYPAL-CERT-URL HTTP header without validation, allowing attackers to control server-side HTTP request destinations. Technical details: The /extensions/paypal/webhook endpoint processes incoming webhook requests and trus...
CVE-2026-12249
An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services AD CS certificate auto-enrollment via the vendored Samba client script internal/policies/certificate/python/vendorsamba/gp/gpcertautoenrollext.py, ADSys utilizes a plaintext...
CERTFR-2026-ACT-027
creationtimestamp| type| source ---|---|--- 2026-06-22 13:28:44+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mouyjlshrm2z 2026-06-22 13:29:08+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116793994374387639 2026-06-22 13:36:55+00:00| seen|...
CVE-2025-48571
creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...
CVE-2025-48617
creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...
CVE-2026-54222
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6qkof7z2j...
CVE-2026-54221
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6zj5mne2o...
CVE-2026-40455
creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwmyt6s62t...
CVE-2026-50643
creationtimestamp| type| source ---|---|--- 2026-06-18 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-50643 2026-06-18 11:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokroeslwu2f...
CVE-2026-12293
creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618 2026-06-22 00:40:48+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnlcsy2u2f 2026-07-01 13:16:01+00:0...
CVE-2026-12295
creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...
CVE-2026-12303
creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...
CVE-2026-12297
creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...
CVE-2026-46812
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923...
CVE-2026-46949
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 15:07:07+00:00| seen|...
CVE-2026-8484
creationtimestamp| type| source ---|---|--- 2026-06-16 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-8484...
CVE-2026-5482
creationtimestamp| type| source ---|---|--- 2026-06-15 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-5482 2026-06-15 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754364893455307 2026-06-15 13:30:28+00:00| seen|...
kernel security update
4.18.0-553.132.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...