BELL-CVE-2026-64260

Bulletin has no description...

BELL-CVE-2026-64532

Bulletin has no description...

CVE-2026-13690

The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's credentials to bypass the second authentication factor and log in as that user...

CVE-2026-12144

creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...

CVE-2026-18072

creationtimestamp| type| source ---|---|--- 2026-07-29 02:48:40+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqvz4d6i72p 2026-07-29 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrra5ix6zt2y 2026-07-29 06:43:40+00:00| seen|...

CVE-2026-54639

creationtimestamp| type| source ---|---|--- 2026-07-29 02:31:53+00:00| seen| https://gist.github.com/alon710/f56e7fea90184a0067b486a540ca3738...

GHSA-32XH-3X3C-6G6H vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-8458 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

GHSA-HF34-V47H-W6M3 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

PT-2026-65960

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A stack-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

The vulnerability of the bnxt_shutdown() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnxtshutdown function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

PT-2026-65855

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in text and mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarkup,...

PT-2026-65719

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue...

The vulnerability of the cfids_invalidation_worker() function in the fs/smb/client/cached_dir.c module allows a hacker to trigger a service failure in Linux-based operating systems with SMB client support.

The vulnerability of the cfidsinvalidationworker function in the fs/smb/client/cacheddir.c module of the SMB client kernel in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-65818

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A heap-based overflow occurs when Autodesk AutoCAD parses a maliciously crafted DXF file. This issue allows an attacker to cause a system crash, read sensitive information, or execut...

CVE-2026-14959

creationtimestamp| type| source ---|---|--- 2026-07-28 23:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqk2jwuqs2i 2026-07-28 23:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlsmo2et2i...

CVE-2026-57510

creationtimestamp| type| source ---|---|--- 2026-07-28 23:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjsueq3f2x 2026-07-29 12:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwmcj6tp2y...

CVE-2026-14512

creationtimestamp| type| source ---|---|--- 2026-07-28 23:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjg6eoce2s 2026-07-28 23:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlwad67k2a 2026-07-30 05:15:07+00:00| seen|...

CVE-2026-62325

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:41+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm 2026-07-28 23:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5cwt5q2y 2026-07-29...

CVE-2026-54659

Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as .yml path components, allowing untrusted params:locale values with absolute paths or ../ sequences to create a file...