58251 matches found
CVE-2026-59544
creationtimestamp| type| source ---|---|--- 2026-07-23 13:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvlzdlq22s...
CVE-2026-47050
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
PYSEC-2026-3482 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...
PYSEC-2026-3540 sh _uid does not drop supplementary groups (incomplete privilege drop)
Impact The uid option performed an incomplete privilege drop on Linux/Unix-like systems. When sh was run from a process with elevated privileges, such as root, and a command was launched with uid=, the child process changed its UID and primary GID but did not reset its supplementary groups. As a...
EUVD-2026-48219
Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...
CVE-2026-64611
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...
ECHO-9D31-8859-4C82
Bulletin has no description...
ECHO-18B0-99B8-3F51
Bulletin has no description...
GHSA-V2HH-GCRM-F6HX vulnerabilities
Vulnerabilities for packages: langfuse, prism, argo-workflows, opensearch-dashboards, renovate, tileserver-gl, yaml-language-server, vitess...
CVE-2026-9713
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...
CVE-2026-9713
CVE-2026-9713 : The Lumise Product Designer for WooCommerce WordPress plugin (up to version 2.1.1) is vulnerable to SQL injection via the uploaded cart JSON file processed by the checkout AJAX action. The root cause is insufficient escaping of user-provided parameters in the find_resource() funct...
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
CVE-2026-29988
creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:42+00:00| seen| https://www.jerrygamblin.com/2026/07/22/hydrate-hack-repeat-security-summer-camp-2026/ 2026-08-26 04:32:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiwavxcpifrbx...
CVE-2026-59943
creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:05+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-j8qw-6jw8-r297...
PT-2026-64786
CVE ID :CVE-2026-48533 Published : July 23, 2026, 3:27 p.m. | 49 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-60369
...
CVE-2026-60368
...
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
Summary Netty's OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID. A bad actor can replay a GOOD status response issued for an unrelated certificate by the same CA to bypass revocation checks for any certificate. Details...