26737 matches found
SUSE CVE-2026-48804
python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...
CVE-2026-56334: Improper Access Control
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...
Linux Distros Unpatched Vulnerability : CVE-2026-10098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCSP CertID serial-number length-confusion in wolfSSLOCSPrespfindstatus allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be...
RHEL 10 : mod_md (RHSA-2026:30845)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:30845 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...
CVE-2026-56968
creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...
GHSA-VWXW-JRG6-9JXV
creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...
CVE-2026-57947
creationtimestamp| type| source ---|---|--- 2026-06-29 18:33:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4skkzjk25 2026-06-29 21:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfujgoba2o 2026-06-29 21:53:41+00:00| seen|...
httpd: mod_md: unrestricted OCSP response leads to resource exhaustion
A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...
GHSA-37R3-Q4CW-F7GQ
creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...
GHSA-XC63-6253-WPXJ
creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/b0be586b08e26973675ce3d8f1a4a8da...
CVE-2026-13569
creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...
CVE-2026-10823
creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...
httpd: mod_md: unrestricted OCSP response leads to resource exhaustion
A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...
ALSA-2026:30845 Moderate: mod_md security update
This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...
📄 WordPress WP Full Stripe Free 8.4.3 Missing Authorization
The WP Full Stripe Free plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: June 26, 2026 - Last Updated: June 27, 2026 - Researcher: Netwurm...
ECHO-87FF-1FAA-6DFD
Bulletin has no description...
CVE-2026-11597
creationtimestamp| type| source ---|---|--- 2026-06-27 10:50:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q 2026-06-27 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x 2026-06-27 20:16:09+00:00| seen|...
CVE-2026-12432
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. The handler is registered through both wpajax and wpajaxnopriv hooks and the underlying updatefailedpaymentstatus function...
CVE-2025-60474
creationtimestamp| type| source ---|---|--- 2026-06-27 03:17:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaipm22hw2v 2026-06-30 00:08:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpk4cuao27...
