CVE-2026-64713

CVE-2026-64713 affects WebKit in Apple platforms (Safari/WebKit stack on macOS Sonoma/Sequoia and related OS versions). The issue allowed websites to determine if a user had visited a specific link. Apple fixed this in Safari 26.6 and OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visi...

CVE-2026-64713

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link...

EUVD-2026-49577

A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...

CVE-2026-56748

Cribl Stream (before 4.18.2) is affected by an improper validation of symbolic links in the Pack Git import feature. A remote authenticated attacker with Pack import and pipeline preview permissions can trigger arbitrary code execution as the Cribl server process by delivering a crafted Git repos...

CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

CVE-2026-66395

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after...

CVE-2026-48342

creationtimestamp| type| source ---|---|--- 2026-07-27 03:50:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyj2kfki2u 2026-07-27 03:50:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyj4krkw2l...

CVE-2026-49853

creationtimestamp| type| source ---|---|--- 2026-07-27 03:48:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlygqfg4q2n 2026-07-27 03:48:48+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlygsjvxg2m...

CVE-2020-15136

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen| https://gist.github.com/tu-trinh-scale/2134fa4233992263562231dfecbd2046 2026-07-27 00:52:06+00:00| seen|...

PT-2026-65249

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description Websites may be ab...

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

CVE-2026-15720

creationtimestamp| type| source ---|---|--- 2026-07-26 17:00:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkuaa2g722a 2026-07-26 17:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkual4n5s2j...

CVE-2016-9223

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:50+00:00| seen| https://t.me/KaitNews/8589 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1813 2026-07-27 00:01:34+00:00| seen| https://t.me/KaitNews/8589 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1813 2026-07-29...

CVE-2026-63720

creationtimestamp| type| source ---|---|--- 2026-07-26 05:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrjpcezbyb2c 2026-07-26 06:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116984750038327145 2026-07-26 06:00:27+00:00| seen|...

CVE-2026-12503

creationtimestamp| type| source ---|---|--- 2026-07-25 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116980149564747478 2026-07-25 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrhnx74zdg2r...

CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

CVE-2026-64375

In CVE-2026-64375, the Linux kernel fix addresses a race in ptrace access checks. Previously proc_pid_get_link() and proc_pid_readlink() looked up the task from the pid twice (before and after the check). The patch passes the task to the ->proc_get_link() handler and adds call_proc_get_link() ...

CVE-2026-64317

CVE-2026-64317 affects the Linux kernel isofs Rock Ridge SL handling. A crafted Rock Ridge SL record can declare a component length that runs past the SL record, causing an out-of-bounds read of up to 255 bytes during parsing in get_symlink_chunk() and parse_rock_ridge_inode_internal(). This can ...