CVE-2026-7640

creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...

RLSA-2026:38503 Moderate: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing...

CVE-2026-11563 Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor does it have proper authorization or CSRF checks, allowing any authenticated user, such as a Subscriber, to delete arbitrary files on the server, which can lead to a full...

Exploit for CVE-2023-38646

cd /metabase-poc cat README.md -p 4444 -P 8000 -u http://loc...

CVE-2026-61505

creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...

CVE-2026-12271

creationtimestamp| type| source ---|---|--- 2026-07-14 03:14:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlai7m3x32c...

EUVD-2026-43614

A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.CheckCommand of the file internal/tools/execapproval.go. The manipulation results in incomplete blacklist. The attack can be executed remotely. The exploit has been made public...

CVE-2026-57705

creationtimestamp| type| source ---|---|--- 2026-07-14 01:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3ivgsst2a 2026-07-16 08:16:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsbulbeg2b...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-44768 Security misconfiguration in SAP CRM (WebClient UI)

SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy CSP configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application...

PT-2026-58117

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A protection mechanism failure in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information over a network. Specifically, the system recorded the fu...

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

The vulnerability of the Undertow web server, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-58002

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

PT-2026-58464

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

RockyLinux 10 : plexus-utils (RLSA-2026:38514)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38514 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

PT-2026-58575

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A double free issue exists in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. This occurs when a victim opens a specially crafted file,...

PT-2026-58759

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description A stack-based buffer overflow exists in the software, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocat...

PT-2026-58675

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the PAM SSH key and certificate retrieval endpoints allows an authenticated low-privileged user to disclose the private key of an S...

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...