atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

PT-2026-61537

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the...

PT-2026-61614

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

Amazon Linux 2023 : acl, libacl, libacl-devel (ALAS2023-2026-1986)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1986 advisory. A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname...

PT-2026-61753

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web file/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and...

CVE-2026-13142: Improper Privilege Management

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an unauthenticated attacker who knows a...

The vulnerability of the IOCTL dispatcher in the ASUS System Control Interface (ASCI) driver and the set of tools for managing and protecting corporate devices provided by ASUS Business Manager, which allows a malicious actor to disclose protected information or cause service failures.

The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...

Linux Distros Unpatched Vulnerability : CVE-2026-64030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is...

TP-Link-TL-WR841ND-Security-Audit

...

GHSA-CFCQ-76GR-62X8

creationtimestamp| type| source ---|---|--- 2026-07-19 21:03:21+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mqzojds3zg2g...

CVE-2026-12484

creationtimestamp| type| source ---|---|--- 2026-07-19 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqzoeigsm42w 2026-07-19 21:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27 2026-07-19 22:00:39+00:00| seen|...

CVE-2026-64178

creationtimestamp| type| source ---|---|--- 2026-07-19 18:45:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzgsinfn62i 2026-08-03 09:19:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-64172

creationtimestamp| type| source ---|---|--- 2026-07-19 18:17:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzfabtzjb2e...

CVE-2026-64186

creationtimestamp| type| source ---|---|--- 2026-07-19 18:13:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzf2ciwmo22...

CVE-2026-64176

creationtimestamp| type| source ---|---|--- 2026-07-19 17:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqze7yij3u2j...

CVE-2026-63834

creationtimestamp| type| source ---|---|--- 2026-07-19 16:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz7sunhgo23 2026-08-06 04:47:29+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen...

CVE-2026-63833

creationtimestamp| type| source ---|---|--- 2026-07-19 16:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz6p2prrg2b 2026-07-20 18:42:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3x55gnxp2l 2026-07-20 18:42:57+00:00| seen|...

CVE-2026-64057

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afsgetlink The afs filesystem in the kernel doesn't do locking correctly for symbolic links. There are a number of problems: 1 It doesn't do any locking around afsreadsingle to prevent races between...

CVE-2026-64030

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is 0x000f, so linkid extracted from a PRIOACCESS ML element PERSTAPROFILE subelement can be 0..15. sdata-link has IEEE80211MLDMAXNUMLINKS 15...

CVE-2026-63821

creationtimestamp| type| source ---|---|--- 2026-07-19 16:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz6hf5kqu2a 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...