CVE-2026-19137

creationtimestamp| type| source ---|---|--- 2026-08-06 23:09:54+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117051083590682909 2026-08-07 04:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:21+00:00| seen|...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

AZL-95468 CVE-2026-64652 affecting package gh for versions less than 2.97.0-1

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

CVE-2026-64652

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

UBUNTU-CVE-2026-64652

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

CVE-2026-48078

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the unauthenticated /api/tenants/id/schedule endpoint returns every non-archived channel for a tenant regardless of the channel's isPublic flag. Channels marked...

GHSA-C4C3-PG64-4M4V

creationtimestamp| type| source ---|---|--- 2026-08-06 20:32:06+00:00| seen| https://gist.github.com/alon710/1523a448808a9bd39531599fad70a2e8...

CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

CVE-2026-64652

The CVE covers GitHub CLI (gh) prior to v2.97.0, where gh auth status could reveal part of certain tokens in output. Affected tokens include fine-grained PATs (github_pat_) and GitHub App tokens (ghs_ and ghu_*), plus the Actions GITHUB_TOKEN, whenever the token format contains an underscore afte...

CVE-2026-64592

creationtimestamp| type| source ---|---|--- 2026-08-06 17:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049769070717664 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...

CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification

The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...

CVE-2026-53977

creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjdzwjiu2z...

CVE-2026-11361 Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status

The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing unauthenticated users to bypass payment and trigger paid form actions — such as digital content access, license delivery, and membership...

GHSA-3X6R-WXXG-53VV

creationtimestamp| type| source ---|---|--- 2026-08-06 15:31:19+00:00| seen| https://gist.github.com/alon710/164398037554120d630a453295ebf3cc...

CVE-2026-20288

creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

CVE-2026-18657

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:57+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgtfn5x2y...

CVE-2026-18649

creationtimestamp| type| source ---|---|--- 2026-08-06 12:02:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfyo4ynu22q 2026-08-06 12:02:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048457828808782 2026-08-07 10:12:54+00:00|...

CVE-2026-64587

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...