CVE-2026-13223 Insufficient validation of payment status in pretix-computop

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

CVE-2026-13223

Affected component: pretix with Computop-based payment methods. Root cause: insufficient validation of payment status responses. Impact: an attacker could reuse a successful status for one payment to complete a different payment, gaining access to multiple valid tickets from a single payment. Thi...

CVE-2026-52943

creationtimestamp| type| source ---|---|--- 2026-06-25 10:16:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116810225692140650 2026-07-01 02:47:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:45:02+00:00| seen|...

CVE-2026-53266

creationtimestamp| type| source ---|---|--- 2026-06-25 09:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp465f6xqu2f 2026-07-01 02:44:21+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:52:00+00:00| seen|...

MINI-37VX-3XF5-VFM9

Bulletin has no description...

CVE-2026-9153

creationtimestamp| type| source ---|---|--- 2026-06-25 02:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3et5rs4b2l...

Oracle Linux 9 : post (ELSA-2026-26205)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26205 advisory. 2:3.5.25-3 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 Tenable has extracted the preceding description...

PT-2026-52590

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description A length-confusion issue exists in the wolfSSL OCSP resp find status function. The lookup process compares serial-number bytes without verifying that the two serial numbers are of equal lengt...

Linux Distros Unpatched Vulnerability : CVE-2026-53012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nexthop is replaced with an IPv4 nexthop, the hasv4 flag of all group...

CVE-2026-53090

creationtimestamp| type| source ---|---|--- 2026-06-24 19:00:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806622367648058 2026-08-12 20:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-53127

creationtimestamp| type| source ---|---|--- 2026-06-24 18:36:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2knuqbqn2o 2026-07-23 21:20:32+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrdqvh652o...

CVE-2026-53119

creationtimestamp| type| source ---|---|--- 2026-06-24 18:29:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kb6r5ow2f...

CVE-2026-52971

creationtimestamp| type| source ---|---|--- 2026-06-24 18:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806461162472827...

CVE-2026-52979

In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...

CVE-2026-13006

creationtimestamp| type| source ---|---|--- 2026-06-24 17:10:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806191372211581 2026-07-01 12:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk76eiza2o...

CVE-2026-10091

creationtimestamp| type| source ---|---|--- 2026-06-24 11:49:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moztwkagnv2e 2026-06-26 09:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp6m7sf5l52m...

CVE-2026-52941

creationtimestamp| type| source ---|---|--- 2026-06-24 10:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqkrljyh2t 2026-07-01 02:47:23+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:25:03+00:00| seen|...

CVE-2026-11370

The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'newlink' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations...

CVE-2026-11370

The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'newlink' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations...

SUSE CVE-2026-46607

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...