CVE-2026-59162

creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbfhhklg2a 2026-07-10 23:13:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdblki2rc27 2026-07-10 23:45:18+00:00| seen|...

CVE-2026-3251

creationtimestamp| type| source ---|---|--- 2026-07-10 22:56:00+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdamij56426 2026-07-10 22:56:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdamjacrt2a 2026-07-11 00:13:37+00:00| seen|...

CVE-2026-55638

creationtimestamp| type| source ---|---|--- 2026-07-10 22:49:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdaa2jkj22a 2026-07-10 23:39:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdczk2d552e 2026-07-11 19:00:45+00:00| seen|...

CVE-2026-8595

creationtimestamp| type| source ---|---|--- 2026-07-10 22:18:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6k6jia32c 2026-07-10 22:49:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdabfyz4f2y 2026-07-11 00:16:40+00:00| seen|...

CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

CVE-2026-13244

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0...

CVE-2026-46388

creationtimestamp| type| source ---|---|--- 2026-07-10 22:10:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd637jh5c2e 2026-07-10 23:38:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcylyadf27...

CVE-2026-15374

creationtimestamp| type| source ---|---|--- 2026-07-10 22:10:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd62hzrn727 2026-07-10 22:38:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7n572pl2x 2026-07-11 00:15:42+00:00| seen|...

CVE-2026-57807

creationtimestamp| type| source ---|---|--- 2026-07-10 22:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5js45ha2w 2026-07-10 23:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqdbxlqail22 2026-07-11 02:32:44+00:00| seen|...

CVE-2026-15084

The issue is a Stored XSS in Drupal UI Patterns (SDC in Drupal UI) caused by insufficient sanitization in versions 2.0.0–2.0.17. An attacker must have permissions to create/update content rendered by UI Patterns. Remediation: upgrade to a version later than 2.0.17.

CVE-2026-15084 UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal UI Patterns SDC in Drupal UI allows Stored XSS. This issue affects UI Patterns SDC in Drupal UI versions: from 2.0.0 to 2.0.17...

CVE-2026-12535 Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0...

CVE-2026-59996

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

CVE-2026-57214

RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange...

DEBIAN-CVE-2026-57214

RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange...

CVE-2026-57214

RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange...

UBUNTU-CVE-2026-57220

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does not enforce the configured stream frame-size limit while assembling frames during authentication and before Tune negotiation, allowing an unauthenticated remote client to declare oversized frame length...

CVE-2026-11992

creationtimestamp| type| source ---|---|--- 2026-07-10 21:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2hn2jul2d 2026-07-10 21:05:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqd2ho65xv2o...

CVE-2026-34196

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the...

CVE-2026-57994

creationtimestamp| type| source ---|---|--- 2026-07-10 20:25:26+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqcy7anamo2f 2026-07-10 20:25:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy7aohnm2y...