PT-2026-55623

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Improper link resolution before file access, also known as link following, allows an unauthorized attacker to disclose information over a network. Recommendations At the...

CVE-2026-57682: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Simple Link Directory = 15.0.5 versions...

ROS-20260702-73-0028

The vulnerability of the mdp5planeDestroyState function in the drivers/gpu/drm/msm/disp/mdp5/mdp5plane.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an...

VulnCheck KEV: CVE-2026-1125

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

PT-2026-55466

Name of the Vulnerable Software and Affected Versions SpecifyJS versions prior to 0.2.136 Description CSS value sanitization in the core/src/server/render-to-string.ts file used simple regular expressions to strip expression and urljavascript:, which could be bypassed using null bytes, CSS...

PT-2026-54996

Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...

CVE-2026-57353: Missing Authorization

Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...

CVE-2026-38972

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...

The vulnerability of the sub_400E40() function in the setconf.cgi script of the D-Link DCS-935L wireless HD camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub400E40 function in the setconf.cgi script of the D-Link DCS-935L wireless HD camera software is related to the failure to eliminate special elements during the processing of the UID parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of SAP BusinessObjects Business Intelligence platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by clicking on...

MAL-2026-6768 Malicious code in @marketfront/blenderdevtool (npm)

The @marketfront/blenderdevtool package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

CVE-2026-14398

creationtimestamp| type| source ---|---|--- 2026-07-01 23:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpmnb26u2s 2026-07-02 04:32:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116848507734334065 2026-07-02 08:25:01+00:00| seen|...

CVE-2026-14027

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmowyburo2l 2026-07-02 07:49:51+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:14:32+00:00| seen|...

CVE-2026-53349

creationtimestamp| type| source ---|---|--- 2026-07-01 22:47:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlwvpaaw2r 2026-07-06 06:53:14+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00|...

CVE-2026-53351

creationtimestamp| type| source ---|---|--- 2026-07-01 22:46:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvv3owd2d 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-53350

creationtimestamp| type| source ---|---|--- 2026-07-01 22:46:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvbdcrx2y 2026-07-06 06:53:16+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00|...

CVE-2026-53356

creationtimestamp| type| source ---|---|--- 2026-07-01 22:42:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlnl6wwd2i 2026-07-06 06:53:27+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00|...

CVE-2026-5136

creationtimestamp| type| source ---|---|--- 2026-07-01 22:37:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlehcflp22 2026-07-02 08:19:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnlvkzcfs2d 2026-07-02 19:38:27+00:00| seen|...

CVE-2026-53344

creationtimestamp| type| source ---|---|--- 2026-07-01 22:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlddysy32i 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-53334

creationtimestamp| type| source ---|---|--- 2026-07-01 22:29:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkwsbrrn22 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...