CVE-2026-18275 Authorization Bypass Through User-Controlled Key in eScriptorium

Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True...

CVE-2026-18275

CVE-2026-18275 affects Scripta eScriptorium (up to version 26.04.1). An authorization bypass lies in the process and annotation taxonomy serializers, enabling a remote authenticated user to perform segmentation and transcription against other users’ document parts, overwriting content. The root c...

EUVD-2026-54090

Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True...

CVE-2026-18602

creationtimestamp| type| source ---|---|--- 2026-08-04 16:00:44+00:00| seen| https://www.acn.gov.it/portale/w/gl-inet-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-18601-cve-2026-18602-cve-2026-18612-cve-2026-18616 2026-08-05 01:00:34+00:00| seen|...

CVE-2026-18577

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275 2026-08-03 10:00:37+00:00| seen| https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html 2026-08-03 12:21:24+00:00| seen|...

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-14059

An insufficient policy enforcement flaw was found in the Related-Website-Sets component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502363986...

CVE-2026-57990

creationtimestamp| type| source ---|---|--- 2026-07-26 19:24:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrl4bebryp2w 2026-07-26 20:31:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrl7y2wi472o 2026-07-26 23:07:58+00:00| seen|...

DEBIAN-CVE-2026-64519

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...

MINI-PW26-FJRM-4PM9

Bulletin has no description...

CVE-2026-60373

creationtimestamp| type| source ---|---|--- 2026-07-23 00:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjuumq222d 2026-07-23 01:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbngwj6ip2i 2026-07-23 17:23:15+00:00| seen|...

MAL-2026-10974 Malicious code in rasterkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115c87298c4a239bd4954e39a155929c2480510343aefe1fa7c0b631b467af6b The rasterkit 1.0.2 distribution installs its modules under the top-level PIL/ package name owned by Pillow. toplevel.txt declares PIL and the wheel'...

MINI-R3X8-JHWJ-C4W3

Bulletin has no description...

MINI-RR3V-HP73-H9G2

Bulletin has no description...

JLSEC-2026-689 In the OpenSSL compatibility layer implementation, the function `RAND_poll()` was not behaving as...

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

MINI-9XX5-Q7P7-FCPV

Bulletin has no description...

MAL-2026-10196 Malicious code in jupiter-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e0901ca45da110106c60f288b0166fc51c348a44569d7e7ff22af3d19deafe On import jupitersdk, the package's top-level init.py fetches a payload over HTTPS from a public IPFS gateway...

CVE-2026-13010

creationtimestamp| type| source ---|---|--- 2026-07-10 12:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4oghyvb2x 2026-07-10 13:19:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcafinug52i 2026-07-10 21:53:44+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-42218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in respons...

SUSE CVE-2026-14059

Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...