GHSA-C53H-XMGP-J2HJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3X3P-QX4R-HMGH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-499R-FH8Q-QCFC vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-14146 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XM69-PMF3-JR84 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-14146 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-0275

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS...

MINI-6C4F-WC6W-8GVW

Bulletin has no description...

MINI-RC7M-46C7-6RGJ

Bulletin has no description...

MINI-MM8Q-23P3-R3JR

Bulletin has no description...

MINI-9442-FH9C-PPG4

Bulletin has no description...

MINI-PJQW-G76M-MGQ4

Bulletin has no description...

CVE-2026-0279

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CGA-V4GQ-MXRJ-MQ38

Bulletin has no description...

CVE-2026-59734

creationtimestamp| type| source ---|---|--- 2026-07-09 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqacbssmiz2z 2026-07-13 22:00:04+00:00| seen| https://t.me/GithubRedTeam/92945 2026-07-14 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92945...

CVE-2026-59826

creationtimestamp| type| source ---|---|--- 2026-07-09 18:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqab6hpfet2r 2026-07-09 18:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqabz6y7ax27 2026-07-16 14:04:29+00:00| seen|...

CVE-2026-59224

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, backend/openwebui/routers/terminals.py built the wsterminal upstream URL from an unencoded sessionid and appended userid as a query parameter, allowing query injection to make the terminal backe...

CVE-2026-59216

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...