EUVD-2026-48213

Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...

CVE-2026-9066 WP Compress < 7.10.04 - Reflected XSS via test_zone

The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress...

Malicious Package

Overview helix-deploy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-63871

Name of the Vulnerable Software and Affected Versions Simple Link Directory Pro versions prior to 15.0.9 Description An unauthenticated Cross-Site Request Forgery CSRF issue exists in the Simple Link Directory Pro plugin for WordPress. This occurs due to missing or incorrect nonce validation—a...

CVE-2026-61981: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...

CVE-2026-48013: Server-Side Request Forgery (SSRF)

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against...

Linux kernel Network Adapter Driver Module Heap Buffer Overflow DoS

The vulnerability of the netsecregistermdio function in the drivers/net/ethernet/socionext/netsec.c file of the Linux network adapter driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...

EDAC Driver Heap Buffer Overflow DoS

The vulnerability of the pcigetdevwrapper function in the drivers/edac/i10nmbase.c file of the EDAC driver for the Linux operating system is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux HSI ssi_probe Heap Buffer Overflow DoS

The vulnerability of the ssiprobe function in the drivers/hsi/controllers/omapssicore.c file of the Linux high-speed synchronous serial interface driver core is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the File...

PT-2026-63972

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A cross-site scripting issue exists in the siyuan:// protocol handler. When a link using the format siyuan://plugins/ references a plugin that is not installed, the application opens a custom tab and...

PT-2026-71919

Name of the Vulnerable Software and Affected Versions @auth/core versions prior to 0.41.3 next-auth versions prior to 4.24.15 next-auth versions prior to 5.0.0-beta.32 Description The defaultNormalizer used in the email and magic-link sign-in flow validates an email address before applying Unicod...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ethtoolgetlinkksettings function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel IRQ chip driver Heap Buffer Overflow DoS

The vulnerability of the mvebugicpprobe function in the drivers/irqchip/irq-mvebu-gicp.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the am33xxpmprobe function in the drivers/soc/ti/pm33xx.c file of the Linux operating system’s kernel module is related to errors during link generation. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle Linux 10 : kernel (ELSA-2026-42919)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42919 advisory. - fanotify: fix false positive on permission events CKI Backport Bot RHEL-180076 CVE-2026-46150 - ice: fix double-free of txbuf skb Jakub Ramaseuski...

CVE-2026-60372

creationtimestamp| type| source ---|---|--- 2026-07-22 23:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbiodo4x62j 2026-07-23 00:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjunxony2e 2026-07-23 01:20:25+00:00| seen|...

CVE-2026-60369

creationtimestamp| type| source ---|---|--- 2026-07-22 23:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbiksnd2z2i 2026-07-23 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjsv4isa2e 2026-07-23 01:10:24+00:00| seen|...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73415 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC...