MAL-2026-8946 Malicious code in swmeet01 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8668 Malicious code in slncwszfib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8523 Malicious code in rfetchh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8449 Malicious code in proxytcf1f8d7b (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8420 Malicious code in pd131119hccc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8008 Malicious code in lf295q5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7923 Malicious code in lbfajkdltu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7801 Malicious code in lambfetch003 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7693 Malicious code in g8249bfavd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7595 Malicious code in chmid8500x532747 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-2062 ydata unsafe deserialization

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...

SUSE CVE-2026-13959

Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

FreeBSD : xrdp -- multiple vulnerabilities (a3a34818-79a0-11f1-b295-98b78501ef2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a3a34818-79a0-11f1-b295-98b78501ef2a advisory. xrdp projects reports: xrdp v0.10.6.1 fixes 10 vulnerabilities and 1 regression introduced by ...

GHSA-2W8R-9XJ7-69J5 mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...

CVE-2026-14800

A weakness has been identified in imhamzaazam ecommerceFlask up to cb7d9e24c30a99379651b7493b32048126ef402b. The affected element is an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...

PYSEC-2026-986 Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Impact The macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of the macros would trigger incorrectly. Patches We have patched the issue in GitHub commit...

PYSEC-2026-1054 Tryton Directory Traversal vulnerability

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report...

CVE-2026-53046

creationtimestamp| type| source ---|---|--- 2026-07-06 06:47:24+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:18:23+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-53033

creationtimestamp| type| source ---|---|--- 2026-07-06 06:46:57+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-07-11 01:38:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdjpwamaj2c...

CVE-2026-14800 imhamzaazam ecommerceFlask cross-site request forgery

A weakness has been identified in imhamzaazam ecommerceFlask up to cb7d9e24c30a99379651b7493b32048126ef402b. The affected element is an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...