MINI-6C7P-MP6X-3M9C

Bulletin has no description...

MINI-FG53-79W4-VGHQ

Bulletin has no description...

MINI-6376-RXJ9-P4WC

Bulletin has no description...

WordPress FlowForms – Conversational Form Builder plugin <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification vulnerability

Authenticated Contributor+ Insecure Direct Object Reference to Arbitrary Form Modification vulnerability discovered by Aliyan Khan in WordPress Plugin FlowForms – Conversational Form Builder versions = 1.1.1...

CVE-2026-58378

creationtimestamp| type| source ---|---|--- 2026-07-09 18:53:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqacm3aa3b2x...

CGA-X4CP-X7G2-F2GX

Bulletin has no description...

CGA-H8C2-F869-R3QR

Bulletin has no description...

CGA-H8C5-83J5-49H5

Bulletin has no description...

CGA-JMQR-V577-P296

Bulletin has no description...

CGA-RFVV-Q696-85G5

Bulletin has no description...

CGA-JHV3-X34M-Q7QF

Bulletin has no description...

CGA-PRCM-G2JC-XRPF

Bulletin has no description...

CGA-P29W-VM47-J6W5

Bulletin has no description...

CGA-GFX8-29PC-2JM5

Bulletin has no description...

CGA-QG39-76C7-84HC

Bulletin has no description...

CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...

PYSEC-2026-3181 `CHECK`-fails due to attempting to build a reference tensor

Impact A malicious user can cause a denial of service by altering a SavedModel such that Grappler optimizer would attempt to build a tensor using a reference dtype. This would result in a crash due to a CHECK-fail in the Tensor constructor as reference types are not allowed. Patches We have patch...

MAL-2026-10045 Malicious code in chai-as-sharpened (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e8e5d81ba59ee1353535523ea62b29c07de8d6a5cc50745a471696d80576a On require, the package spawns a detached background node process running lib/initializeCaller.js. That script base64-decodes a hardcoded URL...

MINI-927R-R45V-92M9

Bulletin has no description...

CVE-2026-15184

A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwgnextentity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument nextobj results in null pointer dereference. The attack must be initiated from a local...