CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

CVE-2026-14881

creationtimestamp| type| source ---|---|--- 2026-07-22 20:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7ilrmpy2q 2026-07-22 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7qnhc6z2f 2026-07-24 04:46:08+00:00| seen|...

CVE-2026-13072

creationtimestamp| type| source ---|---|--- 2026-07-22 20:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb77namiq27 2026-07-22 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7r2ehvw2g 2026-07-24 04:45:50+00:00| seen|...

CVE-2026-64796

Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags,...

GO-2026-6025 File Browser: Share API exposes the password hash and bypass token in github.com/filebrowser/filebrowser

File Browser: Share API exposes the password hash and bypass token in github.com/filebrowser/filebrowser...

GO-2026-6015 Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper...

GO-2026-6047 Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev

Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev...

GHSA-VX8H-4PRV-G744 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

UBUNTU-CVE-2026-9737

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

CVE-2026-61209

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sw2ebq2v 2026-07-23 18:17:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow

When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...

CVE-2026-14881

CVE-2026-14881 affects MongoDB Compass: during imports of connections, an attacker can override connection options that are not normally changeable via the connection form. Specifically, a custom browser open command for the OIDC authentication flow can be injected, which is typically configured ...

SUSE-SU-2026:22860-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...

CVE-2026-52470

creationtimestamp| type| source ---|---|--- 2026-07-22 18:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraxzjxawt2i...

CVE-2026-65011

creationtimestamp| type| source ---|---|--- 2026-07-22 18:32:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraxil67sb2e...

Moderate: Red Hat Security Advisory: libpng12 security update

An update for libpng12 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-65650

creationtimestamp| type| source ---|---|--- 2026-07-22 17:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mravkyzzuk2i 2026-07-24 15:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94957 2026-07-24 18:00:04+00:00| published-proof-of-concept|...

CVE-2026-52472

creationtimestamp| type| source ---|---|--- 2026-07-22 17:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratrlnzd52y...

CVE-2026-59886

creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...

CVE-2018-3214

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:05+00:00| seen| Telegram/5IRIQQOTDCKuLb20SN-AA5fEEYRiSpvsdYTvkd2O8wAhw 2026-07-22 17:00:05+00:00| seen| Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ 2026-07-23 00:00:08+00:00| published-proof-of-concept|...