EDB-50321

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:07+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5772856-05e8-4057-9431-7fa5d570eab3...

MINI-F56M-6PF7-HJ95

Bulletin has no description...

SUSE CVE-2026-31323

unknown...

SUSE CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-56334: Improper Access Control

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...

Linux Distros Unpatched Vulnerability : CVE-2026-10098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCSP CertID serial-number length-confusion in wolfSSLOCSPrespfindstatus allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be...

RHEL 10 : mod_md (RHSA-2026:30845)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:30845 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...

CVE-2026-56968

creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27 2026-10-13 10:19:23+00:00| seen| MISP/f8adec39-0b02-47ba-9542-6b9dafe336bd...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

CVE-2026-57947

creationtimestamp| type| source ---|---|--- 2026-06-29 18:33:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4skkzjk25 2026-06-29 21:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfujgoba2o 2026-06-29 21:53:41+00:00| seen|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

GHSA-37R3-Q4CW-F7GQ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...

GHSA-XC63-6253-WPXJ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/b0be586b08e26973675ce3d8f1a4a8da...

CVE-2026-13569

creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...

CVE-2026-10823

creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

ALSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

📄 WordPress WP Full Stripe Free 8.4.3 Missing Authorization

The WP Full Stripe Free plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: June 26, 2026 - Last Updated: June 27, 2026 - Researcher: Netwurm...

ECHO-87FF-1FAA-6DFD

Bulletin has no description...

CVE-2026-11597

creationtimestamp| type| source ---|---|--- 2026-06-27 10:50:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q 2026-06-27 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x 2026-06-27 20:16:09+00:00| seen|...