CVE-2026-15506 SecureAge CatchPulse Driver saappctl.sys heap-based overflow

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been...

CVE-2026-10667

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpq4dedf2a 2026-07-12 18:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhqznqyim2i 2026-07-12 19:37:23+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-56271

creationtimestamp| type| source ---|---|--- 2026-07-12 12:33:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6qvmwwo2y 2026-07-12 12:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqh7hpkdws2f 2026-07-12 12:54:26+00:00| seen|...

CVE-2026-15500

creationtimestamp| type| source ---|---|--- 2026-07-12 12:29:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6jg6l6222...

EUVD-2026-43236

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages...

CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15492

A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. This vulnerability affects unknown code of the file dashboard/studentConductManager.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15485

creationtimestamp| type| source ---|---|--- 2026-07-12 08:31:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgr7yo3wh27 2026-07-12 11:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3ez2kjy2w 2026-07-12 12:15:03+00:00| seen|...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...

CVE-2026-15476

creationtimestamp| type| source ---|---|--- 2026-07-12 04:36:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqge4okj462f 2026-07-12 07:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgocvzdmy26...

CVE-2026-15475

creationtimestamp| type| source ---|---|--- 2026-07-12 03:31:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgaihgpsb2y 2026-07-12 03:50:11+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqgbjhcmyq2s 2026-07-12 03:57:37+00:00| seen|...

CVE-2026-15476

CVE-2026-15476 affects QILING Disk Master 6.0.0.0 and its Kernel Driver component diskbckp.sys, where an unknown function in that library enables local privilege escalation via improper access controls. The vulnerability is local, with low attack complexity and proof-of-concept exploit maturity r...

CVE-2026-15471

creationtimestamp| type| source ---|---|--- 2026-07-12 02:29:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqg4yzgngt2w 2026-07-12 03:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgbnsdymt2x 2026-07-12 03:54:17+00:00| seen|...

EUVD-2026-43196

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handler. The manipulation of the argument callId results in improper authorization. The attack may be performed from remote...

Chromium: CVE-2026-13887 Insufficient policy enforcement in NFC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14399 Uninitialized Use in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...