Stack overflow in phar with circular symlinks

...

CVE-2026-49006

CVE-2026-49006 affects ZTE device firmware. The issue arises from accessing unencrypted information in the firmware, allowing an attacker with adjacent access (AV:A) and high access complexity (AC:H) to obtain credentials related to TLS transmission, with no privileges required and no user intera...

ROOT-OS-ALPINE-321-CVE-2026-3442 CVE-2026-3442 in binutils - Patched by Root

Root has patched CVE-2026-3442 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

CVE-2026-17505

creationtimestamp| type| source ---|---|--- 2026-08-07 06:03:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-17505.yaml 2026-08-08 00:02:14+00:00| confirmed|...

EUVD-2026-54382

The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator's stored cloud service connection with an account under their control, disconnecting the legitimate administrator and...

EUVD-2026-54379

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information the subscribed product, status, and dates by...

CVE-2026-49163

creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mshrkg7rfy2g 2026-08-07 15:12:52+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054869893780449 2026-08-11 19:00:39+00:00| seen|...

CVE-2026-19172

creationtimestamp| type| source ---|---|--- 2026-08-07 04:48:32+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:36+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19189

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...

CVE-2026-49005

CVE-2026-49005 affects ZTE F689 devices, where the root password hash can be obtained from unencrypted firmware information. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) yields a LOW base score (2.4), indicating limited impact to confidentiality. The description confirms leakage of t...

OESA-2026-3311 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through...

OESA-2026-3241 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A denial-of-service and resource...

CVE-2026-45198

The CVE-2026-45198 issue involves kernel software on a platform with Trusted Execution Environment support where the GPU Firmware (RGXFW) may boot using data from non-secure memory. The problem arises when the GPU thread of control stores/retrieves internal data between private memory and main me...

Exploit for CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this pro...

CVE-2026-65668

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshea2pklm2a 2026-08-07 11:14:11+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msighdjie32n 2026-08-07 11:14:15+00:00| seen|...

CVE-2026-3418

creationtimestamp| type| source ---|---|--- 2026-08-07 00:38:31+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuo2pnf2j...

CVE-2026-43629

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:19+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcujg4en2l...

CVE-2026-5857

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:02+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctz6ra52l 2026-08-10 02:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msoywprfwe23...

CVE-2026-70558

creationtimestamp| type| source ---|---|--- 2026-08-07 00:36:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26 2026-08-09 14:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w...

EUVD-2026-54126

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...