EUVD-2025-210247

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...

CVE-2026-49113

Subscriber Arbitrary Code Execution in Cornerstone 7.8.8 versions...

CVE-2026-42380

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-27429

Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...

CVE-2025-69168

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

EUVD-2026-37693

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

EUVD-2026-37689

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

CVE-2026-48776

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource...

RHSA-2026:26460 Red Hat Security Advisory: 389-ds:1.4 security update

Bulletin has no description...

[SECURITY] Fedora 44 Update: openslide-4.0.0-14.fc44

The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...

opencryptoki security update

An update is available for opencryptoki. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The opencryptoki packages contain version 2.11 of the PKCS11 API,...

RLSA-2026:26352 Moderate: opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...

CVE-2026-46904

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-19 06:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3momq4rzkf524...

CVE-2026-46766

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-20 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moqfht63522k...

Malicious code in @mastra/playground-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95ef610dd6911f5d9c670d625d68b49c360aa9d92d8aa2532087c32ffb88a2a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-6030 Malicious code in @mastra/nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cce4b38ce42c23095f722a3fd011dcd5070230e430bd5ef2be73c0eb943f79d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbae003cd01bc2b7f477773c49bbd2254e8ec61118b865fb98abcc832a3f9af The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in mastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c4549467abc2b76f088b4684a79cb551458718b7c5d9beb8ae1af4349d02a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2026-12445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially...

PT-2026-50404

Name of the Vulnerable Software and Affected Versions ShiftUp versions 1.3 and earlier Description An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the unserialize function without proper validation, potentiall...