CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

EUVD-2026-51018

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64408

A flaw was found in the Bluetooth Network Encapsulation Protocol BNEP module of the Linux kernel. The bnepaddconnection function reads the Logical Link Control and Adaptation Protocol L2CAP connection without properly holding a channel lock. This can allow a local attacker to trigger a...

CVE-2025-71386

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:06+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601 2026-08-30 13:33:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o...

CVE-2026-67244

creationtimestamp| type| source ---|---|--- 2026-07-30 04:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/34ezh5ocufffj 2026-08-04 14:29:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7xdfg3x2c 2026-08-05 19:37:07+00:00| seen|...

CVE-2026-18188

creationtimestamp| type| source ---|---|--- 2026-07-30 04:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jfyheqcjmawvu...

CVE-2026-48448

creationtimestamp| type| source ---|---|--- 2026-07-30 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtki7wira23 2026-08-01 11:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e 2026-08-04 11:12:11+00:00| seen|...

CVE-2026-18186

creationtimestamp| type| source ---|---|--- 2026-07-30 03:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/74sf54howitvc...

CVE-2026-51233

creationtimestamp| type| source ---|---|--- 2026-07-30 03:53:15+00:00| seen| https://gist.github.com/programmervuln/698a3ca54a49126a23a60092240d933a...

CVE-2026-16727

creationtimestamp| type| source ---|---|--- 2026-07-30 03:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrth53myr32r...

GHSA-9XQ3-3FQG-4VG7

creationtimestamp| type| source ---|---|--- 2026-07-30 01:32:06+00:00| seen| https://gist.github.com/alon710/3dfab3b451ecd01d7d3ac084db088fec...

CVE-2026-16339

creationtimestamp| type| source ---|---|--- 2026-07-30 00:51:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5pemnuz3idiia...

CVE-2025-63913

creationtimestamp| type| source ---|---|--- 2026-07-30 00:01:47+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrt55mv6fa2e...

PT-2026-66417

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remo...

(Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

PT-2026-66560

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An SSRF Server-Side Request Forgery and local file read issue exists in the multimodal generation endpoint '/v1/chat/completions'. This occurs because the image url variable is not properly...

PT-2026-66416

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...