CVE-2026-54211

Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClientclose.html” is vulnerable to a buffer overflow vulnerability in multiple form data parameters. By submitting excessively long values in these parameters, an authenticated attacker can trigger a server crash, resulting ...

CVE-2026-56848

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing. Mitigation Restrict netwo...

CVE-2026-54215

CVE-2026-54215 affects Tobit Laboratories AG TeamDavid’s Webbox (through Rollout 524). The vulnerability is an open redirect triggered by the replyUrl parameter, enabling an attacker to craft a URL that redirects users’ browsers to an arbitrary third-party site. This can be abused for phishing by...

WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ali Osman ERBAS 0110m4n in WordPress Plugin AI for SEO versions = 2.4.2...

CVE-2026-18938 P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

CVE-2026-15245

CVE-2026-15245 affects the BNE Testimonials WordPress plugin prior to 2.0.8.2. The vulnerability arises from insufficient escaping of a shortcode attribute in a JavaScript context before echoing into an inline script, enabling stored XSS via the Slider shortcode. Impact is that users with contrib...

EUVD-2026-54376

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

ROOT-OS-DEBIAN-13-CVE-2022-1247 CVE-2022-1247 in linux - Patched by Root

Root has patched CVE-2022-1247 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23069 CVE-2026-23069 in linux - Patched by Root

Root has patched CVE-2026-23069 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root

Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-databind jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515 reported for jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding...

OESA-2026-3257 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read...

CVE-2026-62830

creationtimestamp| type| source ---|---|--- 2026-08-07 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z 2026-08-08 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23 2026-08-11 19:00:41+00:00| seen|...

[SECURITY] Fedora 43 Update: freeipa-4.13.2-1.fc43

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

CVE-2026-62896

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheahnqgq2z 2026-08-07 01:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msheas63f42z 2026-08-08 08:07:07+00:00| seen|...

CVE-2026-50515

creationtimestamp| type| source ---|---|--- 2026-08-07 00:31:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/alhkzpabil5ka 2026-08-07 00:54:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsju4a52p 2026-08-07 18:07:47+00:00| seen|...

EUVD-2026-54309

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

EUVD-2026-54307

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

EUVD-2026-54204

The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier that is reissued on every login, allowing an attacker who already knows a user's password to guess the one-time code...