CVE-2026-64742

CVE-2026-64742 is tied to Apple platforms where an app could access sensitive user data due to insecure network transmission; the issue is addressed by mandating HTTPS. Apple fixed it in iOS/iPadOS/tvOS/visionOS/watchOS 26.6. The combined sources confirm the vulnerability involved sending informa...

CVE-2026-64754

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service...

CVE-2026-59730 @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is configured, the @astrojs/node standalone server's static file handler appends a trailing slash to request paths and issues a 301 redirect. Paths beginning with /\ slash-backslas...

ROOT-OS-UBUNTU-2204-CVE-2023-29659 CVE-2023-29659 in rootio-libheif - Patched by Root

Root has patched CVE-2023-29659 in the rootio-libheif package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2023-25563 CVE-2023-25563 in rootio-gss-ntlmssp - Patched by Root

Root has patched CVE-2023-25563 in the rootio-gss-ntlmssp package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-65921

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

CVE-2018-13012

creationtimestamp| type| source ---|---|--- 2026-07-27 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnlqtkadf2i...

CVE-2026-51303

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnleby5dt2v...

CVE-2019-10650

creationtimestamp| type| source ---|---|--- 2026-07-27 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnk37cind26...

UBUNTU-CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-64642

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue h...

CVE-2026-54272

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...

CVE-2026-12394

creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7mmhgz24...

SUSE CVE-2026-62363

unknown...

DEBIAN-CVE-2026-17572

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

UBUNTU-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

CVE-2026-56822

A flaw was found in Netty's netty-handler-ssl-ocsp component. This vulnerability involves a time-of-check/time-of-use TOCTOU race condition within the OCSP stapling validator. A remote attacker could exploit this timing window, allowing them to use a certificate that has been revoked for...

CVE-2026-65564

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...

CVE-2026-17529 AstrBotDevs AstrBot astr_main_agent.py authorization

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astrmainagent.py. The manipulation of the argument req.functool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available an...

CVE-2026-59690

creationtimestamp| type| source ---|---|--- 2026-07-27 15:06:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrn6clq6mb2l 2026-07-27 15:06:31+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116992559643254224 2026-07-28 20:15:12+00:00| seen|...