CVE-2026-46996

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-46383

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600

Technical details beyond the summary are not provided in the connected documents. Monitor for updates to any new information that may clarify affected components, impact, and remediation.

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-16399

creationtimestamp| type| source ---|---|--- 2026-07-21 13:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xc7peii2o 2026-07-22 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

PT-2026-62160

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows a low privileged attacker with network...

PT-2026-63278

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The internal API HTTP client in modules/private/internal.go hardcodes TLSClientConfig.InsecureSkipVerify = true, which disables TLS certificate verification for outbound internal requests. When...

PT-2026-62484

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a full...

PT-2026-62492

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can result in an unauthorized partial...

PT-2026-62490

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized read access to...

PT-2026-62235

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Console component of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTPS to compromise the server...

PT-2026-62770

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description A flaw in the Core component of the Oracle Application Object Library allows a low privileged attacker with network access via HTTPS to compromise the system. This...

PT-2026-62154

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 Description A flaw in the UI Framework component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to unauthorized access...

PT-2026-62719

Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle U.S...

PT-2026-62615

Name of the Vulnerable Software and Affected Versions Oracle Partner Management versions 12.2.3 through 12.2.15 Description A flaw in the Partner Dashboard component allows a low privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized read, update...

CVE-2020-4450

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/153 2026-07-19 00:00:11+00:00| published-proof-of-concept| https://t.me/reverseame/153...

Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements

Metasploit Wrap Up Housekeeping While the Metasploit Framework will be continuing its weekly release cadence, bringing you dear reader our latest content, the Weekly Wrap Up is being shifted to a bi-weekly cadence. The team is planning to use the additional time between posts to record demos of...