ROS-20260724-73-0030

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

CVE-2026-16723

creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...

CVE-2026-64600

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:03+00:00| seen| https://t.me/ctinow/253790 2026-07-22 17:23:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mratmy74ar2r 2026-07-22 17:31:16+00:00| seen|...

📄 ThorVG SVG Parser NULL Pointer Dereference

A proof of concept exploit for ThorVG version prior to 1.0.5 demonstrates a NULL pointer dereference vulnerability in the SVG parser. A malformed, truncated child element within a root svg node causes createElement to return a NULL pointer which is subsequently dereferenced by parseStyle without...

EUVD-2026-46424

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed ...

GHSA-55JH-FWMH-39M4 Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

Akamai Recognized as a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for Edge Distribution Platforms

Customers named Akamai a 2026 GartnerⓇ Peer Insights™ Customers’ Choice for Edge Distribution Platforms. See why they trust us to scale and secure their apps...

GHSA-QVW7-JM5C-6HQW Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET TLS/SSL System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A security feature bypass...

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing System.Security.Cryptography.Xml, System.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabilit...

Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the .NET runtime cryptography layer CryptoNativeGetX509NameInfo. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability...

CVE-2026-64188

creationtimestamp| type| source ---|---|--- 2026-07-20 18:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3x2dlx6w2g 2026-07-20 19:29:44+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953958574500663 2026-08-06 04:47:43+00:00| seen|...

Medium: golang-github-cpuguy83-md2man

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

SUSE CVE-2026-43731

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory...

[SECURITY] Fedora 43 Update: ansible-collection-ansible-posix-2.2.1-1.fc43

Ansible Collection targeting POSIX and POSIX-ish platforms...

[SECURITY] Fedora 44 Update: ansible-collection-ansible-posix-2.2.1-1.fc44

Ansible Collection targeting POSIX and POSIX-ish platforms...

Code-Poisoning Property Inference Attacks

The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning ML models using available code quickly. The training data for ML models, often regarded as private property e.g., clinical records, transaction information, is at...

CVE-2026-59836

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-15 15:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2lmddyc2v...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2026:2981-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2981-1 advisory. This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Changes for ucode-intel: -...

CVE-2026-24233

creationtimestamp| type| source ---|---|--- 2026-07-14 23:09:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnda3ee6c2x 2026-07-14 23:10:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqndckyvok2v 2026-07-14 23:11:04+00:00| seen|...