CVE-2026-57355

creationtimestamp| type| source ---|---|--- 2026-07-20 23:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4hxrfgkg2n 2026-07-21 09:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr5jinmkg227 2026-07-21 19:44:08+00:00| seen|...

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET TLS/SSL System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

CVE-2026-57143

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf...

CVE-2026-55668

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:33+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-8wc8-hf36-mjh9...

CVE-2026-57118

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp...

USN-8558-1: ImageMagick vulnerabilities

It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.0...

CVE-2026-15905

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. Chromium security severity: High...

CVE-2026-53596

creationtimestamp| type| source ---|---|--- 2026-07-20 22:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4crfy6v32i...

CVE-2026-44584

creationtimestamp| type| source ---|---|--- 2026-07-20 22:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cci3qkg23...

CVE-2026-47129

creationtimestamp| type| source ---|---|--- 2026-07-20 22:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c7cpj5n2o 2026-07-20 22:02:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4cbe5sa32x...

GHSA-2HM2-HC3V-44H9 Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Summary Type: Predictable identifier generation. The toc plugin and TableOfContents directive both default to generating heading IDs of the form toc1, toc2, toc3, ... with no input-derived component. An attacker who can place a heading anywhere in the document can predict which tocN ID it will...

EUVD-2026-42337

Mistune: Arbitrary File Read via Include directive path traversal...

EUVD-2026-42331

Mistune: XSS via percent-encoded javascript URI bypass in safeurl...

EUVD-2026-42302

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml...

EUVD-2026-42301

js-yaml: YAML merge-key chains can force quadratic CPU consumption...

CVE-2026-13381

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server...

CVE-2026-12341

creationtimestamp| type| source ---|---|--- 2026-07-20 20:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46li4f7w2g...

CVE-2026-63767

creationtimestamp| type| source ---|---|--- 2026-07-20 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr46ajg2e22s 2026-07-20 23:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fltadqn2u 2026-07-21 12:14:08+00:00| seen|...

CVE-2025-40945

creationtimestamp| type| source ---|---|--- 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr4564uojn2r 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr4564mkvd2s...

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...