SUSE CVE-2026-48978

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

CVE-2026-8247

creationtimestamp| type| source ---|---|--- 2026-07-03 02:42:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjk7xsoj22 2026-07-03 18:59:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra545qlh2c 2026-07-16 08:14:36+00:00| seen|...

CVE-2026-57730

creationtimestamp| type| source ---|---|--- 2026-07-03 00:32:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcbblchq2y...

CVE-2026-57682

creationtimestamp| type| source ---|---|--- 2026-07-03 00:31:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppc7k6qrt2b 2026-07-31 14:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrx6wavptm2h 2026-07-31 18:44:08+00:00| seen|...

CVE-2026-57679

creationtimestamp| type| source ---|---|--- 2026-07-02 21:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyy457if2r 2026-07-03 00:35:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppchwjyrl2b 2026-07-03 00:36:00+00:00| seen|...

GHSA-P88M-4JFJ-68FV

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:05+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

MINI-22QW-2266-8VH5

Bulletin has no description...

PYSEC-2026-681 Unrestricted Upload of File with Dangerous Type in motionEye

motionEye = 0.42.1 and motioneEyeOS = 20200606 allow a remote attacker to upload a configuration backup file containing a malicious python pickle file. This is possible when an installation is accessible over the Internet and uses no or poor authentication credentials. The GitHub repositories for...

MINI-R3H5-Q4H6-62PF

Bulletin has no description...

CVE-2026-11781

creationtimestamp| type| source ---|---|--- 2026-07-02 08:06:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnl6jad272p 2026-07-02 20:08:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotjnx4ny2n...

CVE-2026-5821

creationtimestamp| type| source ---|---|--- 2026-07-02 07:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkd3ji6c2n 2026-07-02 20:13:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpots6j3lb2k...

ROOT-OS-DEBIAN-13-CVE-2026-54371 CVE-2026-54371 in rootio-attr - Patched by Root

Root has patched CVE-2026-54371 in the rootio-attr package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-14126

creationtimestamp| type| source ---|---|--- 2026-07-02 01:47:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvz5xngw23 2026-07-02 01:47:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvz65g2s26 2026-07-02 08:18:48+00:00| seen|...

CVE-2026-14154

creationtimestamp| type| source ---|---|--- 2026-07-02 01:11:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtytnzvz2q 2026-07-02 08:22:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:48:37+00:00| seen|...

CVE-2026-14419

creationtimestamp| type| source ---|---|--- 2026-07-02 00:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpyz4dpi2s 2026-07-02 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116847792934953006 2026-07-02 01:30:27+00:00| seen|...

openSUSE 16: stgit / stgit-bash-completion / stgit-emacs / stgit-fish-completion / etc (openSUSE-SU-2026:21185-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21185-1 advisory. Changes in stgit: - Update to version 2.6.0: chore: update changelog for 2.6.0 fiximport: respect --name verbatim, ignoring stgit.namelength testrefresh...

Linux Distros Unpatched Vulnerability : CVE-2026-47714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer...

Linux Distros Unpatched Vulnerability : CVE-2026-48029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induce...

Oracle Linux 9 : php (ELSA-2026-33449)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33449 advisory. - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale...

php security update

8.0.30-6 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale SOAPGLOBALrefmap pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAPPERSISTENCESESSION...