CVE-2026-57684

creationtimestamp| type| source ---|---|--- 2026-07-03 00:18:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppbiksmle26...

PT-2026-55575

Name of the Vulnerable Software and Affected Versions webpack-dev-server versions prior to 5.2.6 Description Internal developer endpoints '/webpack-dev-server/open-editor' and '/webpack-dev-server/invalidate' perform state-changing actions on GET requests without verifying the request origin. Thi...

CVE-2026-41106

creationtimestamp| type| source ---|---|--- 2026-07-02 23:43:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp7kmlawi23 2026-07-03 14:07:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpqptbvsmv2r 2026-07-03 17:57:19+00:00| seen|...

CVE-2026-8441

creationtimestamp| type| source ---|---|--- 2026-07-02 22:23:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpp327ptzn2o 2026-07-02 22:23:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp32aiaer2u 2026-07-03 03:35:32+00:00| seen|...

CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability

...

CVE-2026-26145

CVE-2026-26145 concerns Microsoft Azure Synapse with an elevation-of-privilege flaw caused by improper access control. Affected software is Azure Synapse; the core issue is inadequate access controls that permit an authorized attacker to elevate privileges over a network. The public-facing materi...

CVE-2026-57624

creationtimestamp| type| source ---|---|--- 2026-07-02 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyjrzddk2e...

Arbitrary Argument Injection

Overview linuxfabrik-lib is a Python libraries used in various Linuxfabrik projects, including the 'Linuxfabrik Monitoring Plugins' project. Affected versions of this package are vulnerable to Arbitrary Argument Injection in the configuration of the sudoers file, which allows arbitrary arguments ...

GHSA-9GCR-28RP-CC24 vulnerabilities

Vulnerabilities for packages: mods...

GHSA-94RC-8X27-4472 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-5QMP-9X47-92Q8 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-MQR9-HJR8-2M9W vulnerabilities

Vulnerabilities for packages: k3s...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

inflateghost

InflateGhost — CVE-2026-40711 Critical heap overflow in zli...

Mautic has Stored Cross-Site Scripting (XSS) in Project Option Selector

Summary A stored Cross-Site Scripting XSS vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application fails to sanitize project names returned via AJAX before injecting them into the DOM as optio...

CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...

EUVD-2026-41208

Craft CMS: Missing peer-permission check in AssetsController::actionDeleteFolder allows deletion of other users' assets...

CVE-2026-55114

creationtimestamp| type| source ---|---|--- 2026-07-02 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponeajoqd2v 2026-07-03 07:05:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyayifuw27 2026-07-07 05:07:08+00:00| seen|...

DEBIAN-CVE-2026-54891

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...