PT-2026-59369

Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...

CVE-2026-15506

creationtimestamp| type| source ---|---|--- 2026-07-12 22:29:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqia2lm2hr26 2026-07-12 23:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqie4dn33n2w 2026-07-13 01:00:36+00:00| seen|...

CVE-2026-15505

creationtimestamp| type| source ---|---|--- 2026-07-12 20:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhzcc6z252e 2026-07-12 23:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiex6yemk2x 2026-07-13 00:15:03+00:00| seen|...

CVE-2026-10664

creationtimestamp| type| source ---|---|--- 2026-07-12 18:16:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhrwcqfll2s 2026-07-12 19:52:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhxbzvrvj25...

CVE-2026-10667

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpq4dedf2a 2026-07-12 18:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhqznqyim2i 2026-07-12 19:37:23+00:00| seen|...

CVE-2026-10666

creationtimestamp| type| source ---|---|--- 2026-07-12 17:07:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116908101022929699 2026-07-12 17:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhporgri52a 2026-07-12 18:00:14+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-15499

creationtimestamp| type| source ---|---|--- 2026-07-12 12:35:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6vl7eaj2x 2026-07-13 21:22:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkmshvwml2y 2026-07-14 00:38:47+00:00| seen|...

CVE-2026-15498

creationtimestamp| type| source ---|---|--- 2026-07-12 12:35:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6upqiha2e 2026-07-14 00:26:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkx33yodk2x...

CVE-2026-15497

creationtimestamp| type| source ---|---|--- 2026-07-12 12:34:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6tualzg2y 2026-07-13 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqjm7tmvg52c 2026-07-14 00:38:18+00:00| seen|...

CVE-2026-61874

creationtimestamp| type| source ---|---|--- 2026-07-12 12:34:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6sys2qc2e 2026-07-14 01:00:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkyxtlm5b2w 2026-07-16 08:14:49+00:00| seen|...

CVE-2026-56336

creationtimestamp| type| source ---|---|--- 2026-07-12 12:30:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6mem3on2w 2026-07-14 00:40:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxtxmgqv2s...

CVE-2026-15496

creationtimestamp| type| source ---|---|--- 2026-07-12 11:33:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3gpvglf2i 2026-07-14 00:24:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkwwwoiuz2e...

CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...

CVE-2026-15477

creationtimestamp| type| source ---|---|--- 2026-07-12 05:32:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqghb752f32x 2026-07-12 07:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgpgpsue72z...

CVE-2026-15472

creationtimestamp| type| source ---|---|--- 2026-07-12 02:29:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqg4ybolty2x 2026-07-12 03:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgb3vihax2w 2026-07-12 03:52:55+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2024-37305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum...

Malicious code in tinyparrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7ebbcc82edaa241764193ea85c0492b99f9ed3be805c57ef0914518cd4b6f9 The postinstall script src/build.js reconstructs the strings 'https', 'POST', and the destination host 'rnjkerbf.org/P' from integer-encoded arrays v...