TencentOS Server 2: konsole (TSSA-2025:1022)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1022 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2026-55661

Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize the url field on Slate link/image nodes. Content containing javascript: or data:text/html URLs — including case-variant,...

CVE-2026-13937

creationtimestamp| type| source ---|---|--- 2026-07-01 21:09:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgiccpcs2l 2026-07-01 21:09:49+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgidv7ju2s 2026-07-02 07:46:33+00:00| seen|...

CVE-2026-55661

Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize the url field on Slate link/image nodes. Content containing javascript: or data:text/html URLs — including case-variant,...

CVE-2026-13881

creationtimestamp| type| source ---|---|--- 2026-07-01 20:39:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmescdq4c2u 2026-07-01 20:39:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmesg4dmi2a 2026-07-02 07:22:13+00:00| seen|...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Compose.php process. An attacker can access arbitrary files on the server by crafting image source URLs containing traversal sequences after a valid CKEditor path prefix, which bypasses prefix validation and...

SUSE-SU-2026:2724-1 Security update for python-python-dotenv

This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: follow symbolic links when rewriting .env files bsc1262423...

EUVD-2026-41054

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-53902

creationtimestamp| type| source ---|---|--- 2026-07-01 13:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53902 2026-07-01 13:58:42+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mplofgqeqq2m 2026-07-01 15:32:29+00:00| seen|...

CVE-2026-11880

creationtimestamp| type| source ---|---|--- 2026-07-01 10:06:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplbg73rr52h 2026-07-01 11:38:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgkyekfd2p...

CVE-2026-12732

creationtimestamp| type| source ---|---|--- 2026-07-01 09:15:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6l7fscm2q 2026-07-01 09:15:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6l7vt242g 2026-07-01 11:44:12+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

SUSE CVE-2025-1015

The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book,...

CVE-2026-54902

creationtimestamp| type| source ---|---|--- 2026-07-01 02:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhhy5agn2k 2026-07-02 01:13:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3sylg62b...

UBUNTU-CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

DEBIAN-CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-54502

creationtimestamp| type| source ---|---|--- 2026-07-01 02:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgjjojkq2v 2026-07-02 01:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu4gwuxd2o...

CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

EUVD-2026-40862

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...