CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-14059

An insufficient policy enforcement flaw was found in the Related-Website-Sets component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502363986...

CVE-2026-57990

creationtimestamp| type| source ---|---|--- 2026-07-26 19:24:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrl4bebryp2w 2026-07-26 20:31:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrl7y2wi472o 2026-07-26 23:07:58+00:00| seen|...

DEBIAN-CVE-2026-64519

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...

MINI-PW26-FJRM-4PM9

Bulletin has no description...

CVE-2026-60373

creationtimestamp| type| source ---|---|--- 2026-07-23 00:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjuumq222d 2026-07-23 01:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbngwj6ip2i 2026-07-23 17:23:15+00:00| seen|...

MAL-2026-10974 Malicious code in rasterkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6eea31746baa37e55a76fec564eda1852839be005d53ae1e24bf2b9ea4c7875 This package is a clone of Pillow library with malicious code hidden in an image using steganography. The code is the used in a dependant package to install an...

MINI-R3X8-JHWJ-C4W3

Bulletin has no description...

MINI-RR3V-HP73-H9G2

Bulletin has no description...

JLSEC-2026-689 In the OpenSSL compatibility layer implementation, the function `RAND_poll()` was not behaving as...

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

MINI-9XX5-Q7P7-FCPV

Bulletin has no description...

MAL-2026-10196 Malicious code in jupiter-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e0901ca45da110106c60f288b0166fc51c348a44569d7e7ff22af3d19deafe On import jupitersdk, the package's top-level init.py fetches a payload over HTTPS from a public IPFS gateway...

CVE-2026-13010

creationtimestamp| type| source ---|---|--- 2026-07-10 12:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4oghyvb2x 2026-07-10 13:19:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcafinug52i 2026-07-10 21:53:44+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-42218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in respons...

SUSE CVE-2026-14059

Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ECHO-FF4F-EC7B-6024

Bulletin has no description...

ECHO-7056-FB40-88E9

Bulletin has no description...

EUVD-2026-40746

Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14059

Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...