CVE-2026-18631 jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization

A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. The manipulation leads to authorization...

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

CVE-2026-18604

Summary (CVE-2026-18604): A vulnerability in the Android app textPlus Text Message and Call App (up to 8.3.5) affects DialerActivity within the com.gogii.textplus component. The issue is described as an improper export of Android application components, enabling a local attacker to manipulate the...

CVE-2026-69085

SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint. The caller-supplied keyword is concatenated into SQL without escaping or parameter binding, and the statement can execute on a read-write SQLite handle via a driver that supports stacked statemen...

RLSA-2026:47183 Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fixes: libtiff: libtiff: Heap-based buffer overflow vi...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-58062

CVE-2026-58062 affects Bouncy Castle for Java prior to 1.85, including LTS prior to 2.73.12, and BC-FJA prior to bc-fips 2.0.2 (2.0.x) and 2.1.3 (2.1.x). The issue: Stapled OCSP responses are accepted without binding to the checked certificate, enabling potential information disclosure or integri...

CY376_-AHENKORA_JOSEPH-

CY376 Red Team Project — Exploiting Known CVEs in a Deliberate...

CVE-2026-67673

CVE-2026-67673 affects OreSat Firmware v1.0. The vulnerability resides in the cmd_edl function, triggered by the edl fw_flash command. The argument is copied to a 64-byte stack buffer via memcpy without proper length validation, enabling a stack-based buffer overflow. An attacker with physical a...

PT-2026-67498

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet aton, and getaddrinfo all decode a leading zero as octal. The librar...

RHEL 8 : compat-libtiff3 (RHSA-2026:47183)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:47183 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...

python312-3.12.13-8.1 on GA media (moderate)

python312-3.12.13-8.1 on GA media Announcement ID: openSUSE-SU-2026:11428-1 Rating: moderate Cross-References: CVE-2026-0864 CVE-2026-11940 CVE-2026-11972 CVE-2026-15308 CVE-2026-3276 CVE-2026-4360 CVE-2026-7210 CVE-2026-7774 CVE-2026-8328 CVSS scores: CVE-2026-0864 SUSE : 7.5...

CVE-2025-71399 Better Auth before 1.4.5 Path Normalization Bypass via rou3

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

Fedora 43 : nextcloud (2026-51116fe081)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51116fe081 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-67338

creationtimestamp| type| source ---|---|--- 2026-08-01 23:16:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lzuwy6x24 2026-08-01 23:17:05+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2m2h37u72m 2026-08-01 23:17:06+00:00| seen|...

CVE-2026-67329

creationtimestamp| type| source ---|---|--- 2026-08-01 23:14:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lwauabc2m 2026-08-01 23:15:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lwtkxdv2n 2026-08-01 23:15:13+00:00| seen|...

CVE-2026-67333

creationtimestamp| type| source ---|---|--- 2026-08-01 22:38:59+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jwd337n2v 2026-08-01 22:39:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jwe2prf2e 2026-08-01 22:39:20+00:00| seen|...

CVE-2026-16091

creationtimestamp| type| source ---|---|--- 2026-08-01 18:11:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22ylmwcp2l 2026-08-01 18:51:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms256xjb2s25 2026-08-01 18:51:37+00:00| seen|...

CVE-2026-18059

creationtimestamp| type| source ---|---|--- 2026-08-01 18:08:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22ryomeu2d 2026-08-01 18:45:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24vhlzzw24 2026-08-01 18:48:14+00:00| seen|...