MINI-5MVV-94R6-WX2X

Bulletin has no description...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2022-24812

creationtimestamp| type| source ---|---|--- 2026-06-30 10:51:46+00:00| seen| https://infosec.exchange/users/certvde/statuses/116838675578498232...

EDB-50321

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:07+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5772856-05e8-4057-9431-7fa5d570eab3...

MINI-F56M-6PF7-HJ95

Bulletin has no description...

SUSE CVE-2026-31323

unknown...

SUSE CVE-2026-48804

unknown...

Linux Distros Unpatched Vulnerability : CVE-2026-10098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCSP CertID serial-number length-confusion in wolfSSLOCSPrespfindstatus allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be...

CVE-2026-56968

creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

CVE-2026-57947

creationtimestamp| type| source ---|---|--- 2026-06-29 18:33:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4skkzjk25 2026-06-29 21:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfujgoba2o 2026-06-29 21:53:41+00:00| seen|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

GHSA-37R3-Q4CW-F7GQ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...

GHSA-XC63-6253-WPXJ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/b0be586b08e26973675ce3d8f1a4a8da...

CVE-2026-13569

creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...

CVE-2026-10823

creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

ALSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

CVE-2026-11597

creationtimestamp| type| source ---|---|--- 2026-06-27 10:50:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q 2026-06-27 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x 2026-06-27 20:16:09+00:00| seen|...

CVE-2026-12432

The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. The handler is registered through both wpajax and wpajaxnopriv hooks and the underlying updatefailedpaymentstatus function...