CVE-2026-12778

creationtimestamp| type| source ---|---|--- 2026-06-21 08:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morwedwvx32x 2026-06-22 12:39:57+00:00| seen| https://www.acn.gov.it/portale/w/aomei-disponibili-poc-pubblici-per-le-cve-2026-12778-cve-2026-12779-e-cve-2026-12780...

CVE-2026-12771

creationtimestamp| type| source ---|---|--- 2026-06-21 03:54:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morhy6ygjl2f...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-rails, logstash...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-rails, logstash...

PT-2026-51198

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description An issue in the MCP Server Connection Testing component allows for server-side request forgery SSRF, which is a flaw that enables an attacker to induce the server-side application to make...

CVE-2026-56228

creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...

CVE-2026-56330

creationtimestamp| type| source ---|---|--- 2026-06-20 20:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqp2fi5lq22 2026-06-21 13:11:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116788263084343961...

CVE-2026-56342

creationtimestamp| type| source ---|---|--- 2026-06-20 20:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqoozz66m22...

CVE-2026-56345 AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target usersid from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload wit...

CVE-2026-52717

creationtimestamp| type| source ---|---|--- 2026-06-20 18:20:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moqhv2i2ok2w 2026-06-20 18:20:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moqhuzmfw22w...

SUSE-SU-2026:22297-1 Security update for glib-networking

This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop bsc1267979...

PYSEC-2026-225

picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payloads to bypass RCE blocklists and create...

CVE-2024-58351

creationtimestamp| type| source ---|---|--- 2026-06-20 16:09:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqakzjajf2b 2026-06-21 03:00:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3morewulhnb2f...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

No d...

CVE-2026-48908

creationtimestamp| type| source ---|---|--- 2026-06-20 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mopxorztly2f 2026-06-20 13:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116782676365105563 2026-06-20 13:39:57+00:00| seen|...

CVE-2026-48908

CVE-2026-48908 affects the Joomla extension SP Page Builder (com_sppagebuilder). Reports and PoCs confirm unauthenticated file upload via the asset.uploadCustomIcon task, allowing arbitrary files to be written to the webroot and potentially executing PHP code. Affected versions are 1.0.0 through ...

CVE-2026-11911

creationtimestamp| type| source ---|---|--- 2026-06-20 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mopnmxu4ut2i 2026-06-20 10:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116781968685290768 2026-06-20 11:49:52+00:00| seen|...

SUSE-SU-2026:22189-1 Security update for perl-HTML-Parser

This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...

BELL-CVE-2026-48930

Bulletin has no description...

SUSE CVE-2026-54274

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1...