Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

No description...

Astra Linux – Vulnerability in Chromium

The incorrect security UI in Omnibox in Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Omnibox component of Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML through malicious network traffic. Chromium security severity: Medium...

BELL-CVE-2026-53586

Bulletin has no description...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

RHSA-2026:43711 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

Exploit for Path Traversal in Aiohttp

CVE-20...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-65756

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-16723

creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: authentik-fips, arangodb, keep, rancher-api-ui, vitess, gitlab-rails-ce, gitlab-rails-ce-fips, nextcloud-server, keep-fips, authentik...

GHSA-VHCC-WFM4-93WW vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, spamcheck, airflow, metaflow-service, mitmproxy, apache-beam-python-3.12-sdk, mlflow, py3-cassandra-medusa, label-studio, authentik-fips, azureml-inference-server-http-fips, kserve, datadog-agent-fips, kubeflow-volumes-web-app...