CVE-2026-15905

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. Chromium security severity: High...

CVE-2026-53596

creationtimestamp| type| source ---|---|--- 2026-07-20 22:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4crfy6v32i...

CVE-2026-44584

creationtimestamp| type| source ---|---|--- 2026-07-20 22:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cci3qkg23...

CVE-2026-47129

creationtimestamp| type| source ---|---|--- 2026-07-20 22:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c7cpj5n2o 2026-07-20 22:02:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4cbe5sa32x...

GHSA-2HM2-HC3V-44H9 Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Summary Type: Predictable identifier generation. The toc plugin and TableOfContents directive both default to generating heading IDs of the form toc1, toc2, toc3, ... with no input-derived component. An attacker who can place a heading anywhere in the document can predict which tocN ID it will...

EUVD-2026-42337

Mistune: Arbitrary File Read via Include directive path traversal...

EUVD-2026-42331

Mistune: XSS via percent-encoded javascript URI bypass in safeurl...

EUVD-2026-42302

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml...

EUVD-2026-42301

js-yaml: YAML merge-key chains can force quadratic CPU consumption...

CVE-2026-13381

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server...

CVE-2026-12341

creationtimestamp| type| source ---|---|--- 2026-07-20 20:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46li4f7w2g...

CVE-2026-63767

creationtimestamp| type| source ---|---|--- 2026-07-20 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr46ajg2e22s 2026-07-20 23:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fltadqn2u 2026-07-21 12:14:08+00:00| seen|...

CVE-2025-40945

creationtimestamp| type| source ---|---|--- 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr4564uojn2r 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr4564mkvd2s...

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

CVE-2026-58624 Apache MINA SSHD: Remote execution of JGit commands can write files on the server

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

CVE-2026-58624 Apache MINA SSHD: Remote execution of JGit commands can write files on the server

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

DEBIAN-CVE-2026-44230

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm4: helm4-4.2.3-0.1.2.hum1 aarch64, x8664 helm4-4.2.3-0.1.2.hum1.src src Security Fixes: helm4: CVE-2026-63308...

CVE-2026-63731

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23 2026-07-21 05:00:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j 2026-07-21 05:00:47+00:00| seen|...

CVE-2026-44584

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...