CVE-2026-56016: Generation of Predictable Numbers or Identifiers

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

PT-2026-54520

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate id method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID ...

CVE-2026-58375 JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export

JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export service streams the rendered report for any supplied report id...

CVE-2026-58375 JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export

JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export service streams the rendered report for any supplied report id...

CVE-2026-10816

creationtimestamp| type| source ---|---|--- 2026-06-30 14:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6shvtbg2y 2026-06-30 14:36:53+00:00| seen| https://social.circl.lu/users/circl/statuses/116839560402797150 2026-06-30 22:01:06+00:00| seen|...

CVE-2026-57081

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-8402

creationtimestamp| type| source ---|---|--- 2026-06-30 12:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpixd4leo62v 2026-06-30 12:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116838945704908445...

CVE-2026-57081

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-57081 Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

EUVD-2026-40290

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-12819

creationtimestamp| type| source ---|---|--- 2026-06-30 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837883833246326 2026-06-30 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpiiaagojq2p 2026-06-30 10:19:08+00:00| seen|...

CVE-2026-12114

creationtimestamp| type| source ---|---|--- 2026-06-30 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpi66hflyi2e 2026-06-30 04:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837176228934766 2026-06-30 05:55:49+00:00| seen|...

CVE-2026-12243

creationtimestamp| type| source ---|---|--- 2026-06-30 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mphu4lougb2t 2026-06-30 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116836468435158836 2026-06-30 01:43:05+00:00| seen|...

CVE-2026-54030

creationtimestamp| type| source ---|---|--- 2026-06-30 00:40:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphrdgxors2n 2026-06-30 00:40:38+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphrdgxc5x2r 2026-08-01 17:07:19+00:00| seen|...

CVE-2026-8023

creationtimestamp| type| source ---|---|--- 2026-06-30 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mphp3wwrcd2d 2026-06-30 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116836115168562466 2026-06-30 00:06:29+00:00| seen|...

PT-2026-53915

Name of the Vulnerable Software and Affected Versions OpenAPI.NET versions 2.0.0-preview11 through 2.7.4 OpenAPI.NET versions 3.0.0 through 3.5.3 Description An issue in the parsing of OpenAPI documents can lead to process termination due to a stack overflow when a document contains a circular...

PT-2026-53856

Name of the Vulnerable Software and Affected Versions Net::BitTorrent versions prior to 2.0.2 Description Remote memory exhaustion is possible through the processing of deeply nested bencoded input. The bdecode function recurses for each nested list or dictionary level without a depth limit. Duri...

CVE-2026-10648

creationtimestamp| type| source ---|---|--- 2026-06-29 23:58:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphoxnxguj2q 2026-06-30 01:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphvjll4t22o...

CVE-2026-7656

creationtimestamp| type| source ---|---|--- 2026-06-29 23:57:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphowclzrx2y 2026-06-30 00:01:40+00:00| seen| https://gist.github.com/ichintu/8b78df900d5aca0afc4dd97225bd83dc 2026-06-30 01:15:37+00:00| seen|...

CVE-2026-41896

creationtimestamp| type| source ---|---|--- 2026-06-29 23:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmhrstrp2h 2026-06-29 23:18:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphmq3627t2n...