CVE-2026-56016 CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

CVE-2026-56016

CVE-2026-56016 (CGI::Session::ID::md5) affects Perl CGI::Session versions before 4.49. The vulnerable code path uses generate_id to build a session id from a MD5 digest of the process ID, epoch time, and rand(), all low-entropy/predictable sources. This enables an attacker to predict session IDs ...

BELL-CVE-2026-53298

Bulletin has no description...

BELL-CVE-2026-53310

Bulletin has no description...

BELL-CVE-2026-53289

Bulletin has no description...

BELL-CVE-2026-13757

Bulletin has no description...

CVE-2026-6070

creationtimestamp| type| source ---|---|--- 2026-07-01 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116843192352018324 2026-07-01 09:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpl6m64hwe2t 2026-07-01 12:45:16+00:00| seen|...

CVE-2026-13844

creationtimestamp| type| source ---|---|--- 2026-07-01 05:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843147892992564 2026-07-02 01:09:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtui7ukz22 2026-07-02 07:20:44+00:00| seen|...

CVE-2026-13805

creationtimestamp| type| source ---|---|--- 2026-07-01 05:22:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843042073075587 2026-07-02 07:19:14+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:29:12+00:00| seen|...

CGA-7H6W-J992-94P2

Bulletin has no description...

EUVD-2026-40906

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.9.1 via the 'userId' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-11988

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.9.1 via the 'userId' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-7871

creationtimestamp| type| source ---|---|--- 2026-07-01 04:01:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842723128491080 2026-07-01 17:43:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm2xu7kks26 2026-07-03 04:37:07+00:00| seen|...

CVE-2026-13246 GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blockid' and other shortcode attributes of the 'givewpcampaigncomments' shortcode in versions up to, and including, 4.16.0. This is due to insufficient input sanitizati...

CGA-8VR8-7J4X-7HF6

Bulletin has no description...

CVE-2026-7840 UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wisenderr and wireplyhdr in repeater/webgui/webutils.c write the caller-supplied HTTP request URI into a fixed 1000-byte global buffer hdrbuf via unchecked sprintf calls...

CVE-2026-56264

creationtimestamp| type| source ---|---|--- 2026-07-01 03:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpklg64alo25 2026-07-07 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpzmrtboah2b...

CGA-PP87-FXW9-H75R

Bulletin has no description...

GHSA-M63V-2G9W-2W6V

creationtimestamp| type| source ---|---|--- 2026-07-01 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842484590156234 2026-07-01 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkjmgapbr23...

CVE-2026-43716

creationtimestamp| type| source ---|---|--- 2026-07-01 02:49:57+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:59+00:00| seen| https://www.thezdi.com/blog/2026/6/30/the-june-2026-apple-security-update-review 2026-07-02 01:00:43+00:00| seen|...