USN-8504-1 sogo vulnerabilities

It was discovered that SOGo did not properly sanitize categories used for events, tasks, and contacts. A remote authenticated attacker could possibly use this issue to perform cross-site scripting attacks. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...

CVE-2026-55993

creationtimestamp| type| source ---|---|--- 2026-07-05 20:49:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwh77eadh25 2026-07-06 12:51:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy4xvx6z62s 2026-07-09 03:56:59+00:00| seen|...

CVE-2026-56139

creationtimestamp| type| source ---|---|--- 2026-07-05 20:44:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o 2026-07-06 11:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26 2026-07-09 03:54:50+00:00| seen|...

CVE-2026-48205

creationtimestamp| type| source ---|---|--- 2026-07-05 20:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425 2026-07-06 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b 2026-07-09 08:07:07+00:00| seen|...

CVE-2026-49086

creationtimestamp| type| source ---|---|--- 2026-07-05 20:17:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwffn4twj2n 2026-07-20 15:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94308 2026-07-21 00:00:38+00:00| published-proof-of-concept|...

CVE-2026-43865

creationtimestamp| type| source ---|---|--- 2026-07-05 19:44:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwdlgokiu2l 2026-07-06 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116873273590366771 2026-07-06 13:30:31+00:00| seen|...

CVE-2026-14747

creationtimestamp| type| source ---|---|--- 2026-07-05 16:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvyykp26m2s...

CVE-2026-57985

creationtimestamp| type| source ---|---|--- 2026-07-05 16:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx5kkif527 2026-07-06 07:49:14+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:45+00:00|...

CVE-2026-14732

creationtimestamp| type| source ---|---|--- 2026-07-05 12:45:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvm6vlipk2i...

CVE-2026-53070

creationtimestamp| type| source ---|---|--- 2026-07-05 03:10:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpulzgq5ki2g 2026-07-06 06:48:07+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

Malicious code in fmt-date-lite (npm)

The npm package fmt-date-lite is a supply-chain dropper disguised as a benign date-formatting utility its description reads "Lightweight date formatting utility with locale support". It ships six files, no source repository and no dependencies, with its real behaviour in an install script. A...

CVE-2024-1248

The silent Just-In-Time JIT provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provisioning process to overwrite existing roles of local users wi...

EUVD-2024-55648

The silent Just-In-Time JIT provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provisioning process to overwrite existing roles of local users wi...

CVE-2026-14626

creationtimestamp| type| source ---|---|--- 2026-07-04 20:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mptut6oxhh2o...

CVE-2026-53362

creationtimestamp| type| source ---|---|--- 2026-07-04 19:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpttsvlvec2a 2026-07-05 03:25:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumv3odqu2q 2026-07-06 06:53:36+00:00| seen|...

MAL-2026-6757 Malicious code in vps-maintenance-paperclip-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d7d517534385e3776097217c197836517e4f4d84ef29598724c4398bfc875e On import of the server entry module, a top-level try block detaches a shell process that 1 appends an attacker-controlled ssh-ed25519 public key to...

EUVD-2026-41674

A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sysioctl of the file components/lwp/lwpsyscall.c of the component Parameter Handler. Executing a manipulation can lead to divide by zero. The attack may be launched remotely. The exploit has been published and may...

GHSA-V8VC-CMF9-GG2C

creationtimestamp| type| source ---|---|--- 2026-07-04 12:51:30+00:00| seen| https://bsky.app/profile/selfhost.directory/post/3mpt3zzsn3f2w...

CVE-2025-71345

creationtimestamp| type| source ---|---|--- 2026-07-04 04:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsaqy7fnc2h 2026-07-04 06:16:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpsfy7pr742g 2026-07-04 15:01:21+00:00| seen|...

SUSE CVE-2026-55950

Time-of-check Time-of-use TOCTOU race condition vulnerability in Erlang/OTP ssl dtlspacketdemux module allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener. A DTLS server listener uses a single shared dtlspacketdemux genserver process to route incoming UDP...