Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...

CVE-2026-46054

creationtimestamp| type| source ---|---|--- 2026-06-12 19:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116738725787227262 2026-07-02 06:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:17:49+00:00|...

CVE-2026-45833

creationtimestamp| type| source ---|---|--- 2026-06-12 18:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dbluklu2x 2026-09-02 01:00:15+00:00| seen| Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is 2026-09-03 00:00:38+00:00| published-proof-of-concept|...

CVE-2026-45830

creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...

MINI-X7XG-RVWP-6374

Bulletin has no description...

Exploit for CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...

CGA-R78V-2M6W-5437

Bulletin has no description...

CVE-2026-44250

creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...

CVE-2026-47124: Exposure of Sensitive Information to an Unauthorized Actor

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...

VRChat says reported data breach never happened

A data breach notice has been filed with the Maine Attorney General, saying more than 2.4 million users of VRChat have had their data breached. The question is, was it VRChat who filed the breach notice, or did someone pretending to represent the company post it instead? On Reddit, a VRChat...

CVE-2026-40995

CVE-2026-40995 affects Spring Web Services versions 3.1.0–3.1.8, 4.0.0–4.0.18, 4.1.0–4.1.3, and 5.0.0–5.0.1. The issue arises in the X509AuthenticationProvider, which could issue a fully authenticated X509AuthenticationToken when a presented certificate maps to a UserDetails, without applying Spr...

ALSA-2026:25341 Important: tomcat9 update

Certificate revocation bypass due to improper OCSP response validation...

VMware Spring Web Services 安全漏洞

VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from the...

Chatwoot Scanner

This is a security assessment tool designed to evaluate authentication status, response behavior, and possible exposure indicators in Chatwoot conversation filtering functionality...

GHSA-P9CG-VQCC-GRCX

creationtimestamp| type| source ---|---|--- 2026-06-10 22:51:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsdlo6672x...

CVE-2026-47946

creationtimestamp| type| source ---|---|--- 2026-06-10 20:04:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj25bawp22...

CVE-2026-0268

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:28+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfn3qd3i2w 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 23:32:18+00:00| seen|...

CVE-2026-0267

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...

Updated postfix packages fix security vulnerability

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. CVE-2026-43964...

MGASA-2026-0192 Updated postfix packages fix security vulnerability

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. CVE-2026-43964...