MINI-6X3M-53J9-Q97Q

Bulletin has no description...

MINI-W56W-7635-H2FG

Bulletin has no description...

MINI-QPC7-9W62-8459

Bulletin has no description...

MINI-RV8F-HJMX-58M5

Bulletin has no description...

MINI-457C-JFF3-29R4

Bulletin has no description...

MINI-264F-2X6M-P57W

Bulletin has no description...

CVE-2026-65501

Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...

CVE-2026-61946

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

PYSEC-2026-3538 Prompty: Arbitrary file read via file reference expansion

Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...

Prompty: Arbitrary file read via file reference expansion

SummaryPrompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to th...

CVE-2025-13146

creationtimestamp| type| source ---|---|--- 2026-07-23 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrcqv2rsnl2o...

CVE-2026-65501

CVE-2026-65501 affects the WordPress plugin Shiptastic for WooCommerce (versions

CVE-2026-65463 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-65463

CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...

CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

CVE-2026-61946

WordPress Easy Appointments plugin

kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs

A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. This vulnerability occurs when skbgroreceive attempts to merge zerocopy socket buffers skbs without properly managing page reference counts, specifically when the SKBFLMANAGEDFRAGREFS flag is set. An attacker...

ECHO-A6ED-1CEA-98BC

Bulletin has no description...

PT-2026-64023

CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference IDOR vulnerability in the IncBackups application's incremental-backup handlers deleteBackup, fetchRestorePoints, and restorePoint that allows authenticated panel users to access or manipulate other...

kernel security update

6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...