ROOT-APP-NPM-GHSA-67MH-4WV8-2F99 GHSA-67mh-4wv8-2f99 in @rootio/esbuild - Patched by Root

Root has patched GHSA-67mh-4wv8-2f99 in the @rootio/esbuild package for Root:npm. Multiple fixed versions available...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

GHSA-88FW-V6X4-3F58 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

MINI-646F-CHJV-JV7H

Bulletin has no description...

CVE-2026-16291

The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user before deleting it, allowing any authenticated user such as a Subscriber to delete other users' notifications by enumerating notification identifiers...

EUVD-2026-51936

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

EUVD-2026-51940

The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user including an administrator and take over the account...

EUVD-2026-51930

Summary...

EUVD-2026-51927

A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper...

CVE-2026-18573

A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper...

ROOT-OS-UBUNTU-2204-CVE-2023-52732 CVE-2023-52732 in rootio-linux - Patched by Root

Root has patched CVE-2023-52732 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-40325 CVE-2025-40325 in rootio-linux - Patched by Root

Root has patched CVE-2025-40325 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68789 CVE-2025-68789 in rootio-linux - Patched by Root

Root has patched CVE-2025-68789 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2023-53491 CVE-2023-53491 in rootio-linux - Patched by Root

Root has patched CVE-2023-53491 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

GHSA-88FW-V6X4-3F58 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-M4P7-R5RC-7G4J vulnerabilities

Vulnerabilities for packages: superset, mlflow...

CVE-2026-13339

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...

Security update for webkit2gtk3 (important)

openSUSE security update: security update for webkit2gtk3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21508-1 Rating: important References: bsc1271638 Cross-References: CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699...

Security update for keybase-client (low)

openSUSE Security Update: Security update for keybase-client Announcement ID: openSUSE-SU-2026:0272-1 Rating: low References: Cross-References: CVE-2026-39824 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2026-13339 CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewpgetsvgcontent' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensiti...