mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-44727 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

SummaryPyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

PYSEC-2026-431 OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2026-13549

creationtimestamp| type| source ---|---|--- 2026-06-29 11:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfw2fged2g...

CVE-2026-57965

creationtimestamp| type| source ---|---|--- 2026-06-29 11:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfkxxaqx2d 2026-06-29 12:59:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgk53jybe2t...

CVE-2026-13551

creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfgos4cc2t...

CVE-2026-25707

creationtimestamp| type| source ---|---|--- 2026-06-29 11:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgeejxf3d2y 2026-06-29 12:41:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgj6gnudt2t 2026-06-29 20:47:44+00:00| seen|...

CVE-2026-13560

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2025-9033

creationtimestamp| type| source ---|---|--- 2026-06-29 10:31:34+00:00| seen| https://bsky.app/profile/wasacon.bsky.social/post/3mpgbv456bx2k...

CVE-2026-54820

creationtimestamp| type| source ---|---|--- 2026-06-29 10:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpgazmb4od2d...

CVE-2026-41991

CVE-2026-41991 affects GNU gzip’s gzexe utility, where insecure temporary file handling creates a TOCTOU vulnerability. If mktemp is unavailable in PATH, gzexe constructs a PID-based temporary path without exclusive access or existence checks. A local attacker can pre-create the predicted path as...

CVE-2026-41991 Predictable Temporary File in GNU gzip

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID PID. This predictable filename is created without...

WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Link Whisper Free versions = 0.9.4...

CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13532

creationtimestamp| type| source ---|---|--- 2026-06-29 08:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3cpev2p2y 2026-06-29 10:46:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcqd2fox2g 2026-06-29 19:55:28+00:00| seen|...

CVE-2026-13535

creationtimestamp| type| source ---|---|--- 2026-06-29 08:28:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2zqxq6j2a 2026-06-29 10:47:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcshrsp62n 2026-06-29 19:57:07+00:00| seen|...

CVE-2026-13538

creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...

CVE-2026-54816

creationtimestamp| type| source ---|---|--- 2026-06-29 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg2czqzdd2m...

CVE-2025-2902

creationtimestamp| type| source ---|---|--- 2026-06-29 08:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzht3xd223 2026-06-29 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg45kog3k2e 2026-06-29 10:41:57+00:00| seen|...