CVE-2026-54885

Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound HTTP requests to attacker-chosen URIs, including internal services and cloud metadata endpoints. Three code paths fetch remote...

CVE-2026-54885

Boruta exposes a Server-Side Request Forgery (SSRF) in its OAuth/OpenID flow. Three code paths fetch URIs supplied by the requester (request_uri and jwks_uri) with minimal validation: only scheme presence, no HTTPS enforcement, no host/IP allowlist, and no checks against loopback/private ranges o...

MINI-M6X2-953M-X536

Bulletin has no description...

CVE-2026-7260

creationtimestamp| type| source ---|---|--- 2026-07-30 12:19:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ecr6xcbeftyzl 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...

CVE-2026-7260

The CVE affects PHP’s phar handling, where circular symbolic links in phar archives can cause unbounded recursion, exhausting the C stack and crashing the PHP process. Affected versions are PHP 8.2.x before 8.2.33, 8.3.x before 8.3.33, 8.4.x before 8.4.24, and 8.5.x before 8.5.9. Root cause is un...

Silver Fox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

RHSA-2026:47939 Red Hat Security Advisory: python3.12 security update

Bulletin has no description...

BIT-SQLITE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...

Exploit for CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea di...

CLEANSTART-2026-IJ07606 Security fixes in ztunnel-fips 1.27.8-r0

Package ztunnel-fips version 1.27.8-r0 fixes 3 vulnerabilities: ghsa-394x-vwmw-crm3, ghsa-9f94-5g5w-gf6r, CVE-2026-4428...

CLEANSTART-2026-EW52288 Security fixes in cassandra-reaper-fips 3.8.0-r3

Package cassandra-reaper-fips version 3.8.0-r3 fixes 2 vulnerabilities: ghsa-gc5v-m9x4-r6x2, CVE-2026-25645...

CLEANSTART-2026-JU24232 Security fixes in elastic-beats 9.3.3-r1

Package elastic-beats version 9.3.3-r1 fixes 2 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj...

CLEANSTART-2026-HW41013 Security fixes in postgresql15 15.3-r0

Package postgresql15 version 15.3-r0 fixes 2 vulnerabilities: CVE-2023-2454, CVE-2023-2455...

CLEANSTART-2026-MT28666 Security fixes in postgresql 11.3-r0

Package postgresql version 11.3-r0 fixes 2 vulnerabilities: CVE-2019-10129, CVE-2019-10130...

CLEANSTART-2026-IF88864 Security fixes in postgresql15 15.5-r0

Package postgresql15 version 15.5-r0 fixes 3 vulnerabilities: CVE-2023-5868, CVE-2023-5869, CVE-2023-5870...

CLEANSTART-2026-AH35915 Security fixes in redis 7.2.5-r1

Package redis version 7.2.5-r1 fixes 3 vulnerabilities: CVE-2024-31227, CVE-2024-31228, CVE-2024-31449...

CLEANSTART-2026-NF40329 Security fixes in openbao-fips 2.1.1-r10

Package openbao-fips version 2.1.1-r10 fixes 3 vulnerabilities: ghsa-pjcq-xvwq-hhpj, ghsa-j88v-2chj-qfwx, CVE-2026-32952...

CLEANSTART-2026-JG51034 Security fixes in nodejs 10.15.3-r0

Package nodejs version 10.15.3-r0 fixes 1 vulnerabilities: CVE-2019-5737...

CLEANSTART-2026-RH71405 Security fixes in mongosh 2.8.2-r3

Package mongosh version 2.8.2-r3 fixes 3 vulnerabilities: ghsa-rp42-5vxx-qpwr, ghsa-gh4j-gqv2-49f6, CVE-2026-41650...

CLEANSTART-2026-HO55656 Security fixes in grafana-alloy-fips 1.15.0-r1

Package grafana-alloy-fips version 1.15.0-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963...