PT-2026-64251

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for...

python314-3.14.6-2.1 on GA media (moderate)

python314-3.14.6-2.1 on GA media Announcement ID: openSUSE-SU-2026:11343-1 Rating: moderate Cross-References: CVE-2026-11940 CVSS scores: CVE-2026-11940 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-11940 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:...

EUVD-2026-48427

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...

EUVD-2026-48425

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0...

CVE-2026-21653

Johnson Controls CCure 9000 and Victor Application Server are affected by a SSRF vulnerability (CVE-2026-21653) impacting versions 2.9 through 3.0. The issue enables Server-Side Request Forgery due to an insecure handling of external requests within the Victor application server. CVSS 4.0 base sc...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC...

WordPress Fluent Support – Helpdesk & Customer Support Ticket System plugin <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Fluent Support versions = 2.3.0...

CVE-2026-61310

creationtimestamp| type| source ---|---|--- 2026-07-23 18:18:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:44:48+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrz6nxn4gg2c...

MINI-G599-3RV6-274G

Bulletin has no description...

SUSE-SU-2026:22938-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.3.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.3.hum1.src src Security Fixes: prometheus3.5: CVE-2026-56852...

CVE-2026-65521

Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...

CVE-2026-65490

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...

CVE-2026-65462

Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...

CVE-2026-65464

Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...

CVE-2026-59540

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-57397

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-57428

Unauthenticated Cross Site Scripting XSS in Sprout Clients = 3.2.3 versions...

EUVD-2026-48130

Unauthenticated Broken Access Control in Graphina = 3.1.12 versions...

CVE-2026-65528

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...