CVE-2026-55379

creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...

GHSA-4X34-CHG5-MWJJ chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

In Chmoder::chmod the recursive branch overwrites the running result instead of accumulating it, so the exit code reflects only the last file processed: if self.recursive r = self.walkdirwithcontextfile, true; // overwrites r else r = self.chmodfilefile.andr; PoC: GNU returns 1 when a file fails;...

CVE-2026-24012

creationtimestamp| type| source ---|---|--- 2026-07-06 19:14:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyseyhbm32c...

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

SUSE-SU-2026:2781-1 Security update for postfix

This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...

Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

CVE-2025-29329

creationtimestamp| type| source ---|---|--- 2026-07-06 11:07:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxx55vsds2i...

MINI-PP3C-H8V7-6M4M

Bulletin has no description...

CVE-2026-14798

creationtimestamp| type| source ---|---|--- 2026-07-06 08:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxoyfymn62b 2026-07-08 16:12:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j4raelr2d...

PYSEC-2026-811 OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

PYSEC-2026-816 OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

web2py exposure of sensitive information

web2py before 2.14.2 allows remote attackers to obtain the sessioncookiekey value via a direct request to examples/simpleexamples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957...

CVE-2026-14802

creationtimestamp| type| source ---|---|--- 2026-07-06 08:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmshtck52q 2026-07-09 00:29:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ewkdnt42a 2026-08-12 08:00:05+00:00| seen|...

CVE-2025-51629

creationtimestamp| type| source ---|---|--- 2026-07-06 06:50:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxisikupi2p...

CVE-2026-14803

creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...

RockyLinux 10 : mod_md (RLSA-2026:30845)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:30845 advisory. httpd: modmd: unrestricted OCSP response leads to resource exhaustion CVE-2026-29168 Tenable has extracted the preceding description block directly from the...