Clam AntiVirus Toolkit 1.5.4

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2026-19065

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file uploadfiles.php. This manipulation causes unrestricted upload. The attack may be initiated remotely...

CVE-2026-19064

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

CVE-2026-19064 SourceCodester Online Examination & Learning Management System view.php authorization

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

CVE-2026-19064

The CVE-2026-19064 entry describes a vulnerability in SourceCodester Online Examination & Learning Management System 1.0 where manipulation of the ID parameter in /view.php leads to an authorization bypass. The issue is exploitable remotely and affects unknown code paths within the /view.php file...

CVE-2026-65574

creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfu35bbr2a...

CVE-2026-65523

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65523

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-18654

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:19+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfpk5xb2k...

CVE-2026-20303

creationtimestamp| type| source ---|---|--- 2026-08-05 16:51:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24 2026-08-05 17:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26vdjur2s 2026-08-05 18:01:06+00:00| seen|...

UBUNTU-CVE-2026-54876

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim clien...

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

Improper Certificate Validation

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

CVE-2026-53599

creationtimestamp| type| source ---|---|--- 2026-07-31 20:35:09+00:00| published-proof-of-concept| https://github.com/redaxo/core/security/advisories/GHSA-98pp-vccm-qm25 2026-07-31 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtxex3qf2p...

CVE-2026-62261

creationtimestamp| type| source ---|---|--- 2026-07-31 13:41:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y...

CVE-2026-13395

The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...