PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...

PT-2026-63287

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Issue and comment attachment update paths allow the use of attachment UUIDs without verifying if the attachment belongs to the target repository. An authenticated attacker can re-link a victim'...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2737)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

CVE-2026-44230

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

CVE-2026-47255

creationtimestamp| type| source ---|---|--- 2026-07-20 23:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l 2026-07-20 23:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s...

CVE-2026-57145

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u...

CVE-2026-44585

creationtimestamp| type| source ---|---|--- 2026-07-20 22:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4duk7rjn2g...

CVE-2026-47134

creationtimestamp| type| source ---|---|--- 2026-07-20 22:13:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cvvfytm2j...

CVE-2026-44507

creationtimestamp| type| source ---|---|--- 2026-07-20 22:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cnbk5rs2x...

CVE-2026-44583

creationtimestamp| type| source ---|---|--- 2026-07-20 21:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bzhro4d2i...

EUVD-2026-46121

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...

CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...

GHSA-3JXR-9VMJ-R5CP

creationtimestamp| type| source ---|---|--- 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794...

CVE-2026-44585

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

EUVD-2026-44689

Cloudreve: OAuth access tokens bypass scope enforcement due to missing clientid claim...

CVE-2026-12341

creationtimestamp| type| source ---|---|--- 2026-07-20 20:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46li4f7w2g...

GHSA-499R-G7PC-VMP9

creationtimestamp| type| source ---|---|--- 2026-07-20 20:32:00+00:00| seen| https://gist.github.com/alon710/4520df6a85d072915e787e3825f8e5ef...

CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...