MINI-753V-8H6J-GWQ5

Bulletin has no description...

CVE-2026-59674

A flaw was found in suricata. This vulnerability, related to improper handling of symbolic links, allows a local suricata user to escalate their privileges to root. By exploiting this, an attacker could gain full control over the affected system. Mitigation No mitigation is necessary for Red Hat'...

Malicious code in process-status-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd09cd68063b99549f252d3db30b88d9eb4c9e479c784ad0c09ce063764d768 [email protected] is an empty stub index.js exports , empty author/description, suspicious version 99.9.1 whose sole material effect on...

MAL-2026-10581 Malicious code in process-status-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd09cd68063b99549f252d3db30b88d9eb4c9e479c784ad0c09ce063764d768 [email protected] is an empty stub index.js exports , empty author/description, suspicious version 99.9.1 whose sole material effect on...

CVE-2026-56451

creationtimestamp| type| source ---|---|--- 2026-07-14 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116917864212446754 2026-07-14 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqlyt42e3r2x 2026-07-14 10:42:07+00:00| seen|...

CVE-2026-15677

creationtimestamp| type| source ---|---|--- 2026-07-14 09:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlwbuuw7m2e 2026-07-19 20:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzlaxlqca2p...

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...

CVE-2026-58486

creationtimestamp| type| source ---|---|--- 2026-07-14 02:38:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6gu5bqd2z...

GHSA-Q4Q6-R8WH-5CGH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:06+00:00| seen| https://t.me/bdufstecru/3243 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3243...

GHSA-4J6X-2764-M8GH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3289 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3289...

CVE-2026-47212: Missing Authentication for Critical Function

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse received the configured webhook secret but ignored the X-Twilio-Signature HMAC header, allowing unauthenticated POST requests to inje...

CVE-2026-15641: Incorrect Authorization

Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review...

PT-2026-58676

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the access request status endpoint allows an authenticated low-privileged user to approve their own pending access request. This is...

Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

Summary SignedDataVerifier attempts to perform online revocation checking when enableonlinechecks=True, but its OCSP validation logic accepts stale GOOD responses as valid indefinitely. In appstoreserverlibrary/signeddataverifier.py, ChainVerifier.checkocspstatus verifies the OCSP response...

GHSA-8F6J-263M-G72X Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

Summary SignedDataVerifier attempts to perform online revocation checking when enableonlinechecks=True, but its OCSP validation logic accepts stale GOOD responses as valid indefinitely. In appstoreserverlibrary/signeddataverifier.py, ChainVerifier.checkocspstatus verifies the OCSP response...

CVE-2026-62195

creationtimestamp| type| source ---|---|--- 2026-07-13 23:15:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkt4djxzu2i 2026-07-15 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqoemwbh6j2f...

GHSA-CM8G-8JFQ-887P

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92588 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92588 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92588 2026-07-16 19:00:16+00:00| seen|...

CVE-2026-57803

creationtimestamp| type| source ---|---|--- 2026-07-13 19:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkgiadrvj2e 2026-07-14 02:26:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql5seep2a22 2026-07-16 08:08:03+00:00| seen|...

Access Control Bypass

Overview DIRAC is an interware, meaning a software framework for distributed computing. Affected versions of this package are vulnerable to Access Control Bypass via the setPilotStatus function and related database operations. An attacker can modify or access unauthorized database records by...

CVE-2026-35210

creationtimestamp| type| source ---|---|--- 2026-07-13 18:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd5omnae2f 2026-07-16 08:05:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrnubw7r2i...