GHSA-2R5C-GW76-RH3W

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3290 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3290...

GHSA-G2PF-XV49-M2H5

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3288 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3288...

CVE-2026-44761

creationtimestamp| type| source ---|---|--- 2026-07-14 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkypxf4yz2v 2026-07-14 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116915740682728635 2026-07-14 01:30:27+00:00| seen|...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

CVE-2026-27690

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b 2026-07-14 01:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26 2026-07-14 03:00:52+00:00| seen|...

GHSA-8F6J-263M-G72X

creationtimestamp| type| source ---|---|--- 2026-07-14 00:41:43+00:00| seen| https://gist.github.com/alon710/0adc313573f186411d15e2bc7c96b8d7...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper timeout management during network read operations in the receive loop. An attacker can cause the application to become unresponsive or crash by sending specially crafted network packets. Details...

PT-2026-58679

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /exam.php. Such manipulation of the argument day leads to cross site scripting. It is possible to launch the attack remotely. The exploit ...

PT-2026-58925

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.82, deeply nested $or, $and, and $nor query condition operators in the REST API or LiveQuery query handling could trigger exponential-time processing in the internal...

Why Not Fix It Once and for All? an Empirical Study of Multiple Patches for Vulnerability Fixes in Open-Source Software

Security patches for open-source software constitute a foundational resource for vulnerability remediation research and practice. However, analyzing and applying multiple patches remains challenging, especially when trying to determine at what point in a patch sequence a vulnerability is fully...

PT-2026-58061

Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of post-handshake client migration events. Impact quiche supports the connection migration features described in Section 9 of RFC 9000, which allows a single QUIC connection to survive...

On the Security Implications of PQC in TLS: Handshake Exhaustion and IDS Degradation

Post-Quantum Cryptography PQC is increasingly being integrated into TLS 1.3 to enhance resilience against quantum-enabled attacks. However, the additional computational and communication overhead introduced by PQC primitives during the handshake phase may also amplify the impact of TLS handshake...

ROS-20260714-73-0060

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

PT-2026-58928

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...

KLA91148 Multiple vulnerabilities in Microsoft Open Source Software

Multiple vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Subsystem for Linux WSL2 Kernel can...

PT-2026-58929

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...

CVE-2026-57215

creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...

CVE-2026-62328

creationtimestamp| type| source ---|---|--- 2026-07-13 23:35:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkua5tviz2x...

CVE-2026-55475

creationtimestamp| type| source ---|---|--- 2026-07-13 23:24:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktlkikqr2d...

CVE-2026-62195

creationtimestamp| type| source ---|---|--- 2026-07-13 23:15:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkt4djxzu2i 2026-07-15 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqoemwbh6j2f...