kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...

CVE-2026-6541

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrrssiwv27 2026-07-13 13:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjsnlua352g 2026-07-13 18:19:01+00:00| seen|...

perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution.

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The preparse method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can resul...

CVE-2026-57411

creationtimestamp| type| source ---|---|--- 2026-07-13 12:10:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqjnw7ua252u 2026-07-13 12:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116912594644386383...

nginx:1.24 security, bug fix, and enhancement update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

CVE-2026-59523

creationtimestamp| type| source ---|---|--- 2026-07-13 11:57:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn72rpzm2d 2026-07-13 12:45:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpwgtxo52e 2026-07-14 01:51:23+00:00| seen|...

CVE-2026-61985

creationtimestamp| type| source ---|---|--- 2026-07-13 11:54:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjmzksnuu2a 2026-07-13 12:46:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpxttvs52e 2026-07-13 14:12:44+00:00| seen|...

CVE-2026-57391

creationtimestamp| type| source ---|---|--- 2026-07-13 11:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkgobrfr2w 2026-07-16 07:56:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5m3eps2b...

CVE-2026-59518

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkc6f45w2l 2026-07-13 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjlorfkkl2w 2026-07-13 11:55:15+00:00| seen|...

nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers

A flaw was found in NGINX. When NGINX is configured to proxy HTTP/2 traffic using the ngxhttpproxyv2module or ngxhttpgrpcmodule with specific settings, a remote, unauthenticated attacker can send specially crafted large headers. This can trigger a heap-based buffer overflow, leading to a restart ...

Important: Red Hat Security Advisory: nginx:1.24 security, bug fix, and enhancement update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-57813

creationtimestamp| type| source ---|---|--- 2026-07-13 10:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjj6fxunm2x 2026-07-13 11:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjll6gxdw2v 2026-07-13 11:54:34+00:00| seen|...

CVE-2026-57811

creationtimestamp| type| source ---|---|--- 2026-07-13 10:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjivgc6hi2g 2026-07-13 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjll56d3f2h 2026-07-13 18:16:29+00:00| seen|...

CVE-2026-61971

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through = 2.6.3...

CVE-2026-59518

Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through = 8.8.2...

CVE-2026-57803

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Struktur Core allows PHP Local File Inclusion. This issue affects Struktur Core: from n/a before 2.7...

CVE-2026-57772

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Blind SQL Injection.This issue affects WP Inventory Manager: from n/a through = 2.4.0...

CVE-2026-57719

Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through = 2.8.3...

CVE-2026-57702

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through = 2.4.2...