CVE-2026-56214

Capgo up to version 12.128.1 is affected by an information disclosure in Supabase PostgREST RPC endpoints is_trial_org and is_paying_org, allowing unauthenticated attackers to enumerate organizations and reveal billing status using the public sb_publishable key. Impact is high for confidentiality...

EUVD-2026-38100

Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints istrialorg and ispayingorg that allows unauthenticated attackers to enumerate organizations and disclose billing status using the public sbpublishable key. Attackers can invoke these endpoin...

CVE-2026-56214 Capgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC

Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints istrialorg and ispayingorg that allows unauthenticated attackers to enumerate organizations and disclose billing status using the public sbpublishable key. Attackers can invoke these endpoin...

Linux Distros Unpatched Vulnerability : CVE-2026-53492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface...

GHSA-GX93-M64W-5M6H Allure Report: Stored XSS via unescaped ANSI helper in status message/trace rendering

Summary The ansi.js Handlebars helper in allure-generator passes user-controlled statusMessage and statusTrace values from test result files through the ansi-to-html library and wraps the output in Handlebars SafeString without HTML escaping. Since ansi-to-html does not escape HTML entities by...

GHSA-VPR4-P6FQ-85JC

creationtimestamp| type| source ---|---|--- 2026-06-19 17:53:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvvf7aa22k...

CVE-2014-6293

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2cee654f-d5b0-40f7-beb3-b2e1500f3a83 2026-06-23 14:04:07+00:00| exploited|...

CVE-2013-1904

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2895e391-349d-4351-b274-f75a1d633be7 2026-06-23 14:04:08+00:00| exploited|...

MINI-75G6-7WX7-W2GJ

Bulletin has no description...

GHSA-JV2H-4P9V-WF5W

creationtimestamp| type| source ---|---|--- 2026-06-19 16:11:36+00:00| seen| https://gist.github.com/alon710/27a1a02d7c391b1b2590b0cf7da6fc5e...

CVE-2021-32813

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b38d9801-bfcf-423c-9ccd-800711aea9ec...

CVE-2022-49198

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/058cafa2-26ca-42a1-a165-03afbaf68788...

CVE-2022-49703

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b0c7a4c-cfc7-4f4b-a719-c926fc7cd37f...

CVE-2026-56138

creationtimestamp| type| source ---|---|--- 2026-06-19 11:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monbqxae5z2r...

Astra Linux – Vulnerability in Apache2

The vulnerability of “Allocation of Resources Without Limits or Throttling” in Apache HTTP Server’s modmd, through OCSP response data. This issue affects Apache HTTP Server versions 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

GHSA-8J37-5W68-WJ2G

creationtimestamp| type| source ---|---|--- 2026-06-19 08:41:59+00:00| seen| https://gist.github.com/alon710/9745ea7f614dc3dd47451c872d75fca1...

CVE-2026-3640

The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpoint at /wp-json/strabl/webhook/order with a permissioncallback of returntrue, which allows all incoming requests...

EUVD-2026-37996

The 2Download Connector for 2DL Hosted Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 0.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...

CVE-2026-3640 STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpoint

The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpoint at /wp-json/strabl/webhook/order with a permissioncallback of returntrue, which allows all incoming requests...

RLSA-2026:25930 Important: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 For more details about the security issues, including the impact, a CVSS score,...