PT-2026-55449

Name of the Vulnerable Software and Affected Versions electerm versions prior to 3.11.11 Description A path traversal issue exists in the Zmodem and Trzsz file download handlers. The software uses remote-supplied filenames directly with the path.join function when receiving transfers, without...

The vulnerability of the library for working with the Protocol Buffers protocol protobufjs, related to uncontrolled changes to object prototype attributes, allows a hacker to trigger a service failure.

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the decoder in the UTF-8 library for working with the Protocol Buffers protocol (Protobuf) protobufjs allows attackers to bypass existing security mechanisms.

The vulnerability of the UTF-8 decoder in the Protocol Buffers Protobuf protobufjs library is related to incorrect handling of Unicode characters. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

PT-2026-55043

Name of the Vulnerable Software and Affected Versions Mosaic Gallery – Advanced Gallery versions prior to 1.2.1 Description A Cross Site Scripting XSS issue exists that allows users with Contributor privileges to execute malicious scripts. XSS is a type of security flaw where an attacker injects...

PT-2026-55231

Name of the Vulnerable Software and Affected Versions UniFi Connect Application versions prior to 3.4.17 Description An improper access control flaw exists in the UniFi Connect Application. A malicious actor with network access can exploit this issue to execute arbitrary commands on the host devi...

The vulnerability of Google Chrome’s Password Manager component allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

The vulnerability of the Network component in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome browser’s Network component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-55026

Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme = 3.2.8 versions...

c3p0-0.14.1-1.1 on GA media (moderate)

c3p0-0.14.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11166-1 Rating: moderate Cross-References: CVE-2026-55223 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the c3p0-0.14.1-1.1...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.2 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo Bonzini Orabug: 39673880 - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta CVE-2026-46331 - netsched: actpedit: use RCU in tcfpeditdump Eric Dumazet Orabug: 39668752 -...

CVE-2026-14022

creationtimestamp| type| source ---|---|--- 2026-07-01 23:42:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmozppbnx2u 2026-07-01 23:42:43+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmozpxqcr2v 2026-07-02 04:24:16+00:00| seen|...

CVE-2026-14067

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoyeg24d2d 2026-07-02 03:40:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4d3bn6e2t 2026-07-02 07:51:16+00:00| seen|...

CVE-2026-14063

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoxqhzig22 2026-07-02 03:39:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4axu2h72i 2026-07-02 07:51:07+00:00| seen|...

CVE-2026-55790

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types...

CVE-2026-14414

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-53355

creationtimestamp| type| source ---|---|--- 2026-07-01 22:48:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxzz3ey2y 2026-07-06 06:53:24+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53346

creationtimestamp| type| source ---|---|--- 2026-07-01 22:45:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmltzqbsd2y...

CVE-2026-53330

creationtimestamp| type| source ---|---|--- 2026-07-01 22:26:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkqs7utf22 2026-07-10 16:46:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqclxjpinh2y...

CVE-2026-14421

Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14388

Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...