CVE-2026-72422

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. A remote attacker could exploit a use-after-free vulnerability by sending specially crafted concurrent SMB2 NEGOTIATE requests on the same connection. This could lead to memory corruption, potentially allowing the attacker to execute...

MINI-884J-6PJG-FCJ8

Bulletin has no description...

MINI-QFVP-G99M-XH6C

Bulletin has no description...

CVE-2026-15748

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

CVE-2026-34399

A flaw was found in FreeCAD. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code can be executed. This vulnerability is due to an eval call on untrusted data from the SVG template files, leading to arbitrary code execution...

CVE-2026-34789

A flaw was found in FreeCAD, a 3D parametric modeler. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted FCStd document. When the document is restored, attacker-controlled module attributes are processed, leading to the execution of arbitrary...

CVE-2026-34398

A flaw was found in FreeCAD, a 3D parametric modeler. The BIM Project Manager's Load Template function does not properly validate certain properties within a project template. This vulnerability allows a remote attacker to embed malicious Python code into a specially crafted BIM project template...

n8n Webhooks - Remote Code Execution

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker,...

CVE-2026-15748

Wordfence analysis confirms an unauthenticated attacker can chain a forged Select-field record with the regex-compatible ph(p)|text/x-php pattern to bypass the forminator_allowed_mime_types() exact-key blocklist, upload executable PHP, and achieve RCE on sites with a custom upload root lacking .h...

EUVD-2026-60569

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

CVE-2026-15748 Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

CVE-2026-65349

creationtimestamp| type| source ---|---|--- 2026-08-18 04:50:07+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:38+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-65343

creationtimestamp| type| source ---|---|--- 2026-08-18 04:50:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:32+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-65337

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:45+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-65334

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-64788

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:23+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:25+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-64784

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:19+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:20+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-64782

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:16+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:43+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-64781

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:14+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-64760

creationtimestamp| type| source ---|---|--- 2026-08-18 04:48:40+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:01+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...