PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...

CVE-2026-61207: Improper Access Control

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Linux Distros Unpatched Vulnerability : CVE-2026-15124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML...

PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...

GHSA-G446-98W2-8P5W

creationtimestamp| type| source ---|---|--- 2026-07-20 22:31:01+00:00| seen| https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771...

CVE-2026-53594

creationtimestamp| type| source ---|---|--- 2026-07-20 22:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cjglmhe2s...

GHSA-3JXR-9VMJ-R5CP

creationtimestamp| type| source ---|---|--- 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794 2026-10-02 10:16:35+00:00| seen| https://gist.github.com/konard/1de110770502ff6ff1f9e5548ab7e7b4...

CVE-2026-44584

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584 Paymenter doesn't reset email verification status after email change

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584 Paymenter doesn't reset email verification status after email change

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-44584

Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...

CVE-2026-44584 Paymenter doesn't reset email verification status after email change

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

EUVD-2026-46088

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k 2026-09-05 13:00:04+00:00| published-proof-of-concept| Telegram/EWyzaOudgwaNXoA105LhIEanQUj5hipt6FRZ98nQPfTHQ 2026-09-06 00:00:46+00:00|...

CVE-2026-16277

creationtimestamp| type| source ---|---|--- 2026-07-20 19:16:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953907325387577 2026-07-23 22:33:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24...

GHSA-PR2V-JX2C-WG9F Tornado vulnerable to Header Injection and XSS via reason argument

Header injection and XSS via reason argument Summary The reason argument used by both RequestHandler.setstatus and tornado.web.HTTPError is designed to allow applications to pass custom "reason" phrases the "Not Found" in HTTP/1.1 404 Not Found to the HTTP status line mainly for non-standard stat...

CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint GET /thread/read/conversationid/threadid allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state openedat...

CVE-2026-12972

creationtimestamp| type| source ---|---|--- 2026-07-20 08:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2t7xjkpw2s...

CVE-2026-64123

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking component. When HSR node-list and node-status operations are performed, a generic-netlink reader might retain a pointer to a freed node table. This can lead to a use-after-free vulnerability, potentially...