GHSA-93WV-JW9V-4972

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3345 2026-07-28 00:00:32+00:00| published-proof-of-concept| https://t.me/bdufstecru/3345...

CVE-2026-56820

A flaw was found in Netty. The OcspClient component fails to validate that the Certificate ID in an Online Certificate Status Protocol OCSP response matches the requested Certificate ID. This vulnerability allows a remote attacker to bypass certificate revocation checks by presenting a legitimate...

MINI-GF9M-WP63-C7H7

Bulletin has no description...

MINI-695H-F8HX-WRX9

Bulletin has no description...

CVE-2026-64531

creationtimestamp| type| source ---|---|--- 2026-07-27 08:12:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990931091139348 2026-07-28 10:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrp7jnvcfc2l 2026-07-28 11:12:13+00:00| seen|...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...

CVE-2026-13390 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

CVE-2026-13390

The Events Calendar WordPress plugin (versions before 6.16.5.1 ) is vulnerable to an unauthenticated status manipulation flaw. The root cause is a missing authorization check on one of its Event Aggregator import REST API routes , combined with a skipped integrity check for a specific status valu...

WordPress The Events Calendar plugin < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation vulnerability

Unauthenticated Event Aggregator Import Status Manipulation vulnerability discovered by Haitam Lazaar in WordPress Plugin The Events Calendar versions 6.16.5.1...

CVE-2026-13390 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

CVE-2026-64225

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325 2026-07-27 11:00:52+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116991593814246930 2026-10-01 18:00:00+00:00| seen|...

CVE-2017-2711

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:11+00:00| seen| https://t.me/KaitNews/2762 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2762 2026-08-05 19:00:05+00:00| seen| https://t.me/KaitNews/2762 2026-08-06 00:00:25+00:00| seen| https://t.me/KaitNews/2762...

CVE-2016-8687

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2791 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2791 2026-08-05 19:00:05+00:00| seen| https://t.me/KaitNews/2791 2026-08-06 00:00:25+00:00| seen| https://t.me/KaitNews/2791...

CVE-2017-3073

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:04+00:00| seen| https://t.me/KaitNews/4296 2026-07-27 00:01:45+00:00| seen| https://t.me/KaitNews/4296 2026-08-04 11:00:04+00:00| seen| https://t.me/KaitNews/4296 2026-08-05 00:00:45+00:00| seen| https://t.me/KaitNews/4296...

GHSA-44JH-J22R-33WQ

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:30+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-27 00:01:06+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-28 01:00:05+00:00| published-proof-of-concept| https://t.me/EchelonEyes/1200 2026-07-29 00:00:52+00:00|...

CVE-2023-41101

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-28 00:00:32+00:00| exploited| https://t.me/EchelonEyes/2245...

Linux Distros Unpatched Vulnerability : CVE-2026-15578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a...