23903 matches found
MINI-WXCX-7GGW-9439
Bulletin has no description...
MINI-P49X-QCC8-8757
Bulletin has no description...
CVE-2026-7764
creationtimestamp| type| source ---|---|--- 2026-06-04 06:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngz5xiqip26...
CVE-2026-38570
The bacnet_stack version 1.3.1 is vulnerable to an Out-of-bounds Read within the bacnet_tag_number_decode() function. An attacker can provide specially crafted input to trigger a read outside the allocated memory bounds, potentially leading to application crashes, unexpected behavior, or a denial...
PT-2026-46256
bacnet stack 1.3.1 contains an Out-of-bounds Read in bacnet tag number decode which allows attackers to cause a denial of service...
CVE-2026-38570
bacnetstack 1.3.1 contains an Out-of-bounds Read in bacnettagnumberdecode which allows attackers to cause a denial of service...
CVE-2026-42840
An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...
We found this fake-invoice campaign while scammers were still building it
A new batch of fake payment invoices is being staged right now, and we caught the campaign while it was still being put together. The emails impersonate PayPal, Amazon, and Geek Squad, and others, and they all share one goal: to scare you into calling a phone number where a fake "support agent" i...
CVE-2026-42840 ERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals
An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...
cnlp-transformers (>=0.3.1rc1, <=0.6.0), crfm-helm (>=0.1.0, <=0.2.1) +12 more potentially affected by CVE-2026-5241 via transformers (4.22.2)
transformers PYPI version 4.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cnlp-transformers =0.3.1rc1, =0.1.0, =0.0.1, =2.0.16, =0.3.8, =0.0.1, =0.4.3, =3.0.5, =0.0.8, =0.0.9 Source cves: CVE-2026-5241 Source...
CVE-2026-35076
creationtimestamp| type| source ---|---|--- 2026-06-03 12:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf4wdftpo2d 2026-06-04 00:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcxuipyk2n 2026-07-03 23:49:33+00:00| seen|...
Keep getting calls from questionable numbers? Meet Scam Number Check
Have you ever gotten a phone call and had a gut feeling that those random digits looked extra suspicious? It happens to millions of people every day. While many people have trained themselves to ignore such calls, they still pose a threat across the US. In fact, scammers stole more than $21 billi...
RHSA-2026:22710 Red Hat Security Advisory: libsoup security update
Bulletin has no description...
SUSE-SU-2026:2229-1 Security update for hplip
This update for hplip fixes the following issues Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via ...
ECHO-6CEE-1D08-9B8B
Bulletin has no description...
SUSE-SU-2026:2222-1 Security update for hplip
This update for hplip fixes the following issues Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via ...
SUSE CVE-2026-44422
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without tracking the pointed object's expected NDR type or ownership. When the same ref-id is reused across two...
EUVD-2025-210027
Memory Corruption when sending random number generator command with insufficient output buffer size...