CVE-2026-55953

creationtimestamp| type| source ---|---|--- 2026-07-27 17:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnfd5zneb2q 2026-07-28 17:22:25+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

CVE-2026-66391

creationtimestamp| type| source ---|---|--- 2026-07-27 16:58:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24...

GHSA-GV7G-JM28-CR3M

creationtimestamp| type| source ---|---|--- 2026-07-27 16:55:41+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u 2026-07-28 21:00:04+00:00| seen| https://t.me/truesecator/8452 2026-07-29 00:00:12+00:00| seen| https://t.me/truesecator/8452 2026-07-29 01:00:04+00:00| seen|...

CVE-2026-66390

Apache Wicket (wicket-core ) versions 9.0.0 through 9.23.0 and 10.0.0 through 10.9.0 are susceptible to a Cross-site Scripting (XSS) vulnerability. The root cause is a lack of proper JavaScript escaping in the Link , ExternalLink , and PopupSettings JavaScript generation code. Attackers can injec...

CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

CVE-2026-59538

creationtimestamp| type| source ---|---|--- 2026-07-27 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbudcvfy2u 2026-08-12 12:16:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msv4b7hthz2w...

GHSA-93WV-JW9V-4972

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3345 2026-07-28 00:00:32+00:00| published-proof-of-concept| https://t.me/bdufstecru/3345...

CVE-2026-41579

A flaw was found in runc, a tool used to run containers. A malicious container image, crafted with a specific type of symbolic link in its /dev directory, can deceive runc. This deception could lead to the deletion of certain files or the creation of predefined symbolic links on the host system...

CVE-2026-66395 SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

EUVD-2026-49328

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

CVE-2026-66395

SiYuan Desktop before v3.7.2 is affected by a reflected XSS in the bazaar plugin readme handler that enables RCE via a crafted siyuan:// deep link. An attacker can inject HTML payloads through the plugin name parameter, which render with insertAdjacentHTML in an insecure Electron renderer and gra...

CVE-2026-13332

creationtimestamp| type| source ---|---|--- 2026-07-27 15:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn66bnwxn2u...

CVE-2026-12495

creationtimestamp| type| source ---|---|--- 2026-07-27 14:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2sy6nmo2y 2026-07-28 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrpd7oaini2g 2026-08-13 11:20:18+00:00| seen|...

WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin Simple Link Directory Pro versions = 15.0.6...

GHSA-6PQ5-P7FC-7XHQ

creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-64515

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This vulnerability arises from incorrect handling of Multi-Link Element MLE defragmentation. When a reconf or EPCS Enhanced Power Save MLE is present in a non-transmitted profile, the defragmentation routine uses an incorrect pointe...

CVE-2026-52686

creationtimestamp| type| source ---|---|--- 2026-07-27 06:55:48+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mrmcuzglnkeh...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...

CVE-2026-64410

creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...