CVE-2026-66397

CVE-2026-66397 affects phpMyFAQ prior to 4.1.6. It fails to validate path traversal in the existing_image field during category updates, allowing an authenticated user to delete arbitrary files via Image::delete(), including the database.php config file. This can disable the installation gate and...

CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-65766

creationtimestamp| type| source ---|---|--- 2026-07-27 15:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn66d2p442y...

CVE-2026-57152

creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...

CVE-2026-47679

creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...

CVE-2026-52848

creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...

GHSA-625J-RW87-4GHR

creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...

CVE-2026-48354

creationtimestamp| type| source ---|---|--- 2026-07-27 08:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmi5p2yhe27...

CVE-2026-52688

creationtimestamp| type| source ---|---|--- 2026-07-27 06:55:48+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mrmcuzglnkeh...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y...

CVE-2026-64410

creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y...

CVE-2026-64386

creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmaklkyki2e...

CVE-2026-64485

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA compress module. The sndcomprtasknew function, responsible for creating driver tasks, does not properly handle errors during the validation of Direct Memory Access DMA buffers or file descriptor reservation. This...

CVE-2026-48341

creationtimestamp| type| source ---|---|--- 2026-07-27 03:50:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyjtzhh22f 2026-07-27 03:50:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyjvup3q2u...

CVE-2026-48369

creationtimestamp| type| source ---|---|--- 2026-07-27 03:27:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlxai5myw2u 2026-07-27 03:27:24+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlxajqsw32s 2026-07-27 03:42:37+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-64524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the...

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325 2026-07-27 11:00:52+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116991593814246930...

CVE-2026-15720

creationtimestamp| type| source ---|---|--- 2026-07-26 17:00:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkuaa2g722a 2026-07-26 17:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkual4n5s2j...

CVE-2026-15712

creationtimestamp| type| source ---|---|--- 2026-07-26 16:32:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrksniyo7z2j 2026-07-26 16:32:41+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrksnsh26c2u...