EUVD-2026-46398

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-47143

Capstone disassembly framework vulnerability CVE-2026-47143 affects Capstone builds compiled with -DCAPSTONE_X86_REDUCE. A NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) can crash applications using the reduced X86 library if given a crafted inp...

CVE-2026-47143 Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-47143 Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-47143 Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

EUVD-2026-43956

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs...

CVE-2026-55081

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...

CVE-2026-21575

The CVE-2026-21575 entry concerns Sourcetree for Mac and Sourcetree for Windows, introduced in version 3.4.11. It is a High severity remote code execution (RCE) vulnerability that an authenticated attacker can exploit to execute arbitrary code with high impact to confidentiality, integrity, and a...

Exploit for Code Injection in Craftcms Craft_Cms

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Auth...

Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-64608

creationtimestamp| type| source ---|---|--- 2026-07-21 15:16:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr643e6ng22o 2026-07-21 15:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr655ygjqd22 2026-07-21 17:06:49+00:00| seen|...

CVE-2026-64609

creationtimestamp| type| source ---|---|--- 2026-07-21 14:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr62xjh4kt2o 2026-07-21 15:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr655zsbrl2z 2026-07-21 17:11:49+00:00| seen|...

Malicious Package

Overview 3-0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-16388

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16370 Mitigation bypass in the DOM: Networking component

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46196

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153...

300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI

As AI accelerates how organizations build and how attackers operate, a deeply connected security ecosystem is how defenders keep up...

CLEANSTART-2026-OI70918 Security fixes for CVE-2026-33870, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, ghsa-2c5c-chwr-9hqw, ghsa-38f8-5428-x5cv, ghsa-72hv-8253-57qq, ghsa-f6hv-jmp6-3vwv, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8 applied in versions: 2.19.5-r0, 3.6.0-r4

Multiple security vulnerabilities affect the opensearch package. These issues are resolved in later releases. See references for individual vulnerability details...

WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

WordPress Masteriyo - LMS plugin = 2.3.0 - Cross Site Scripting XSS vulnerability discovered by K. Sorrachat in WordPress Plugin Masteriyo - LMS versions = 2.3.0...