Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

Bitrix Component - Cross-Site Scripting

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to 1 enumerate attachments on the server and 2 execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim ha...

3DPrint Lite < 1.9.1.5 - Arbitrary File Upload

The plugin does not have any authorisation and does not check the uploaded file in its p3dlitehandleupload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache. id:...

Erxes <0.23.0 - Cross-Site Scripting

Erxes before 0.23.0 contains a cross-site scripting vulnerability. The value of topicID parameter is not escaped and is triggered in the enclosing script tag. id: CVE-2021-32853 info: name: Erxes 0.23.0 - Cross-Site Scripting author: dwisiswant0 severity: critical description: Erxes before 0.23.0...

WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting

WSO2 Management Console through 5.10 is susceptible to reflected cross-site scripting which can be exploited by tampering a request parameter in Management Console. This can be performed in both authenticated and unauthenticated requests. id: CVE-2020-17453 info: name: WSO2 Carbon Management...

GHSA-88FW-V6X4-3F58 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-M4P7-R5RC-7G4J vulnerabilities

Vulnerabilities for packages: superset...

CVE-2026-13339

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...

Security update for webkit2gtk3 (important)

openSUSE security update: security update for webkit2gtk3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21508-1 Rating: important References: bsc1271638 Cross-References: CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699...

CVE-2026-67333

creationtimestamp| type| source ---|---|--- 2026-08-01 22:38:59+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jwd337n2v 2026-08-01 22:39:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jwe2prf2e 2026-08-01 22:39:20+00:00| seen|...

GHSA-M4P7-R5RC-7G4J vulnerabilities

Vulnerabilities for packages: superset, wazuh-manager...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: neo4j, keycloak...

GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: spegel, telegraf, kubo, ipfs-cluster...

CVE-2026-67324

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22 2026-08-01 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t 2026-08-01 22:22:01+00:00| seen|...

CVE-2026-67289

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140...

CVE-2026-67331

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a 2026-08-01 22:07:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z 2026-08-01 23:08:19+00:00| seen|...

CGA-Q3C3-3XH9-GW4X

Bulletin has no description...

CVE-2026-15950

creationtimestamp| type| source ---|---|--- 2026-08-01 17:39:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz63hfnh2d 2026-08-01 17:39:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzz6gz75r2n 2026-08-01 18:39:00+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

OESA-2026-3191 python-setuptools security update

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. Security Fixes: setuptools is a package that allows users to download, build, install, upgrade, and...