CVE-2026-55779

creationtimestamp| type| source ---|---|--- 2026-08-29 10:32:30+00:00| seen| https://gist.github.com/alon710/9e3bb6e078cacafc1d284d829bce0078...

CVE-2026-70419

creationtimestamp| type| source ---|---|--- 2026-08-26 20:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4pern6f22 2026-08-26 20:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtz54ufstr25 2026-08-27 02:21:53+00:00| seen|...

CVE-2026-57171

creationtimestamp| type| source ---|---|--- 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d 2026-09-24 19:52:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4vp-3vw6-r2x5 2026-09-25 03:30:32+00:00| seen|...

PT-2026-82136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the ovpn component when removing a missing key. The function ovpn crypto kill key assumes that both crypto slots are populated and dereferences them before...

MINI-QVFV-837Q-4X8H

Bulletin has no description...

CVE-2026-76234

creationtimestamp| type| source ---|---|--- 2026-08-19 15:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtgyoz4xqn27 2026-08-19 16:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4khnvrycgyzto...

ECHO-D825-D451-60E0

Bulletin has no description...

CVE-2026-70741

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:53+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfatmoapd23 2026-08-19 06:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg46drxnq2t 2026-08-19 17:49:10+00:00| seen|...

CVE-2026-62539

A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...

MINI-J974-WW7P-9M8X

Bulletin has no description...

CVE-2026-19958

creationtimestamp| type| source ---|---|--- 2026-08-16 22:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d5mhygmj7sk3d...

MINI-WGP6-8WHV-8MP8

Bulletin has no description...

MINI-2MG8-G4J9-P374

Bulletin has no description...

CVE-2026-19434 Stored Cross-site Scripting in Pentestify finding severity field

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

CVE-2026-19434

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

CVE-2026-19434 Stored Cross-site Scripting in Pentestify finding severity field

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

CVE-2026-19434 Stored Cross-site Scripting in Pentestify finding severity field

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

CVE-2026-19434: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

PT-2026-70205

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

CVE-2026-59231 Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...