CVE-2026-15430

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-68587 SiYuan before v3.7.3 Information Disclosure via getHeading*Transaction

SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints that return rendered block DOM without publish-access checks. Anonymous readers or publish RoleReader tokens can...

CVE-2026-58062

creationtimestamp| type| source ---|---|--- 2026-08-03 12:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtjhgyp2l 2026-08-03 20:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7f7p43zj2p 2026-08-04 09:28:18+00:00| seen|...

Security update for python-urwid

This update for python-urwid fixes the following issue: CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2026-12852

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12852...

CVE-2026-12802

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12802...

CVE-2026-64135

creationtimestamp| type| source ---|---|--- 2026-08-03 08:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-63860

creationtimestamp| type| source ---|---|--- 2026-08-03 08:34:33+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

Exploit for CVE-2026-17583

cve-id Donate Support the maintenance of this project wit...

CVE-2026-7777

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-45920

creationtimestamp| type| source ---|---|--- 2026-08-03 07:32:11+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-16564

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

CVE-2026-43480

creationtimestamp| type| source ---|---|--- 2026-08-03 07:15:36+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43453

creationtimestamp| type| source ---|---|--- 2026-08-03 07:12:30+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43432

creationtimestamp| type| source ---|---|--- 2026-08-03 07:10:33+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

ROOT-APP-MAVEN-CVE-2026-34483 CVE-2026-34483 in io.root.org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-34483 in the io.root.org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38286 CVE-2024-38286 in io.root.org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2024-38286 in the io.root.org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

DEBIAN-CVE-2026-6695

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA Paint Shop Pro Array image file. This vulnerability, a heap-based out-of-bounds write in the decodelzss function of the PAA file format plugin, allows data to be written beyond t...

CVE-2026-8763

creationtimestamp| type| source ---|---|--- 2026-08-03 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030049213840403 2026-08-03 06:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms5t2wluuw2j 2026-08-03 20:58:03+00:00| seen|...