CVE-2026-13333

creationtimestamp| type| source ---|---|--- 2026-06-27 06:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpat3naxtl2b 2026-06-27 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpbgsco3gf2p 2026-06-29 19:22:59+00:00| seen|...

BELL-CVE-2026-53132

Bulletin has no description...

CVE-2026-9677

The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariffinfourl setting before outputting it in the frontend HTML via the generateshariff function, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...

CVE-2025-60465

creationtimestamp| type| source ---|---|--- 2026-06-27 03:12:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaigmvxot2a...

GHSA-R2JR-M2RH-F5HG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: aactl, policy-controller, crossplane, kyverno-notation-aws, kyverno, kubescape, zot, teleport, trivy, ratify, trivy-operator, slsa-verifier...

EUVD-2026-39927

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or...

External Control of File Name or Path

Overview @pnpm/installing.deps-resolver is a Resolves dependency graph of a package Affected versions of this package are vulnerable to External Control of File Name or Path via the lockfile alias handling process. An attacker can overwrite files or directories outside the intended nodemodules...

RLSA-2023:2786 Moderate: wayland security, bug fix, and enhancement update

Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...

wayland security, bug fix, and enhancement update

An update is available for wayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Wayland is a protocol for a compositor to talk to its clients, as well as a C...

EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2475)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2515)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...

EulerOS 2.0 SP15 : pyOpenSSL (EulerOS-SA-2026-2499)

According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback t...

EUVD-2026-39484

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes...

EUVD-2026-38067

Subsonic API: any authenticated user can delete or read any other user's playlist IDOR...

CVE-2026-52780

creationtimestamp| type| source ---|---|--- 2026-06-26 23:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa42cxqt52c 2026-06-28 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvjmkmg2v...

CVE-2026-52783

creationtimestamp| type| source ---|---|--- 2026-06-26 23:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3tm22wn2s 2026-06-28 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7ufns52x 2026-06-29 14:45:10+00:00| seen|...

EUVD-2026-39483

pnpm: Repository-controlled configDependencies can select a pacquet native install engine...

GHSA-9RC6-8CJV-RCVX Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection

Description The getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request's Host header with a fixed path, with zero validation of the Host header: go func getRedirectURLc gin.Context string scheme := "http://" referer := c.Request.Referer if...

GHSA-RXHJ-4M44-96R4 pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

Summary pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pn...