CVE-2026-50743

creationtimestamp| type| source ---|---|--- 2026-07-20 19:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3zaum4cl2q...

DEBIAN-CVE-2026-64194

Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack at least with...

MGASA-2026-0280 Updated nilfs-utils packages fix security vulnerability

Undefined Behavior and Out-of-Memory via Unvalidated slogblocksize. CVE-2026-55392...

Updated xmlstarlet package fixes a security vulnerability

The updated package fixes a security vulnerability: XML external entity vulnerability. References: https://lists.fedoraproject.org/archives/list/[email protected] oraproject.org/message/KDR5XRMVBCDZ4HWDCGLKDVKGSCWACG33/...

MGASA-2026-0275 Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

MGASA-2026-0281 Updated python-nltk packages fix security vulnerability

URL-Encoded Path Traversal in nltk.data.load Allows Arbitrary Local File Read. CVE-2026-54293...

MGASA-2026-0286 Updated perl-CGI-Session package fixes a security vulnerability

The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...

Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

Updated nilfs-utils packages fix security vulnerability

Undefined Behavior and Out-of-Memory via Unvalidated slogblocksize. CVE-2026-55392...

Updated graphicsmagick packages fix a security vulnerability

The updated packages fix a security vulnerability: Use-After-Free in MSL decoder. CVE-2026-46523...

Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities

The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...

MGASA-2026-0282 Updated graphicsmagick packages fix a security vulnerability

The updated packages fix a security vulnerability: Use-After-Free in MSL decoder. CVE-2026-46523...

CVE-2026-58484

creationtimestamp| type| source ---|---|--- 2026-07-20 19:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3yfyrhgv2s...

CVE-2025-8173

creationtimestamp| type| source ---|---|--- 2026-07-20 19:00:06+00:00| seen| https://t.me/autodafemanuals/268 2026-07-21 00:00:24+00:00| seen| https://t.me/autodafemanuals/268 2026-07-22 00:00:29+00:00| published-proof-of-concept| https://t.me/autodafemanuals/268...

.NET: .NET: Network Spoofing Vulnerability

A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity...

EUVD-2026-46064

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens...

CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

UBUNTU-CVE-2026-44227

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

UBUNTU-CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2022-35499

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:06+00:00| seen| Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg 2026-07-20 18:00:06+00:00| seen| Telegram/STZr2ThKqLSEwjdullvBnAUiGEaXr6eGbEs0nK3zCFtJ6Z4 2026-07-21 00:00:34+00:00| seen|...