CVE-2025-71363

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkiocxvkt2o...

CVE-2025-71350

creationtimestamp| type| source ---|---|--- 2026-07-01 02:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkikqadfi26...

CVE-2025-71371

creationtimestamp| type| source ---|---|--- 2026-07-01 02:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkihemk3x2u...

CVE-2026-52909

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:03+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-05 03:05:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpulrh2cog2f 2026-07-06 06:23:46+00:00|...

CVE-2026-54897

creationtimestamp| type| source ---|---|--- 2026-07-01 02:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgsi5gey2v 2026-07-01 21:55:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmizrwebj2o 2026-07-02 01:14:03+00:00| seen|...

[SECURITY] Fedora 44 Update: maradns-3.5.0037-1.fc44

MaraDNS is a package that implements the Domain Name Service DNS, an essential internet service. MaraDNS has the following advantages: Secure. Supported. Easy to use. Small. Open Source...

kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

A flaw was found in the Linux kernel. A local attacker can exploit an out-of-bounds write vulnerability when the kernel recomputes an IPv6 Source Routing Header SRH. This issue occurs because insufficient headroom is reserved during the recompression process, leading to memory corruption...

CVE-2026-53861

creationtimestamp| type| source ---|---|--- 2026-07-01 00:01:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mpk7lklwuq2o 2026-07-10 23:07:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mqdba7kbfs2a...

PT-2026-55214

Name of the Vulnerable Software and Affected Versions neuro-cortex-memory versions 3.17.0 and later Description Local arbitrary code execution is possible because the server treats the CLAUDE PROJECT DIR environment variable as a trusted source root. When the open visualization tool is invoked, t...

CVE-2026-55223

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

UBUNTU-CVE-2026-55223

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223 c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223

CVE-2026-55223 affects the c3p0 JDBC connection pooling library. Before 0.14.0, c3p0 can enable a deserialization gadget “sink” when combined with other libraries: DataSource.getConnection() and ConnectionPoolDataSource.getPooledConnection() are treated as safe JavaBean properties, but invoking p...

CVE-2026-50003

creationtimestamp| type| source ---|---|--- 2026-06-30 22:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3ooy4n423 2026-07-01 02:36:40+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-02 20:45:13+00:00| seen|...

CVE-2026-52868

creationtimestamp| type| source ---|---|--- 2026-06-30 22:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3fqjp4i2z 2026-07-01 02:36:51+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-44628

creationtimestamp| type| source ---|---|--- 2026-06-30 22:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2kv3ht624 2026-07-01 02:36:49+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-58449

creationtimestamp| type| source ---|---|--- 2026-06-30 22:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2bvcfe326 2026-07-02 20:45:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpovld6x432e...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-devel-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-static-2.15.3-0.1.1.hum1 aarch64, x8664...