CVE-2026-6440

creationtimestamp| type| source ---|---|--- 2026-07-10 11:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3pxzoud2e 2026-07-10 12:11:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4m2khqd27 2026-07-10 21:17:59+00:00| seen|...

CVE-2026-53363 xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfsconsumefrags iptfsconsumefrags transfers paged fragments from one socket buffer to another but fails to propagate the SKBFLSHAREDFRAG flag. This is the same class of bug that was...

CVE-2026-1946

creationtimestamp| type| source ---|---|--- 2026-07-10 11:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k 2026-07-10 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c 2026-07-10 21:14:43+00:00| seen|...

CVE-2026-21049

creationtimestamp| type| source ---|---|--- 2026-07-10 08:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbqdrqv5w2i 2026-07-10 09:37:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtywpqfv2z 2026-07-10 12:46:57+00:00| seen|...

CVE-2026-21043

creationtimestamp| type| source ---|---|--- 2026-07-10 08:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpjynmsx2t 2026-07-10 09:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtyglqpd2e...

CVE-2026-40007

Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipeairgapreceiverenabled=true, the IoTDB AirGap receiver's readLength method calls itself recursively each time it recognises the E-language prefix in socket data, with no depth limit. An unauthenticate...

CVE-2026-21041

creationtimestamp| type| source ---|---|--- 2026-07-10 08:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboymq5bl2e 2026-07-10 09:36:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtxonpzj2e...

CVE-2026-21050

creationtimestamp| type| source ---|---|--- 2026-07-10 08:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqboroe7bw26 2026-07-10 09:38:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtzo44nn2z 2026-07-10 18:32:32+00:00| seen|...

EUVD-2026-42839

Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malformed server data. This issue affects Apache IoTDB C++ client: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users...

CVE-2026-40454 Apache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data

Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malformed server data. This issue affects Apache IoTDB C++ client: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users...

WordPress WP Hotel Booking plugin <= 2.3.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by 1M4 in WordPress Plugin WP Hotel Booking versions = 2.3.1...

WordPress LoginPress Pro plugin <= 6.2.3 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Nguyen Ngoc Duc duc193 in WordPress Plugin LoginPress Pro versions = 6.2.3...

CVE-2026-11392

creationtimestamp| type| source ---|---|--- 2026-07-10 05:38:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x 2026-07-10 05:38:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k...

EUVD-2026-42809

A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of the component Message Endpoint. The manipulation results in missing authorization. The attack may be launched remotely. The exploit has been released...

CVE-2026-15332 zhayujie CowAgent Message Endpoint channel.py authorization

A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of the component Message Endpoint. The manipulation results in missing authorization. The attack may be launched remotely. The exploit has been released...

EUVD-2026-42799

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to blind SQL Injection via the search parameter in all versions up to, and including, 2.10.1 due to insufficient escaping on the user supplied...

CVE-2026-15330 zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function buildimagecontent/downloadtodataurl of the file agent/tools/vision/vision.py of the component Vision Tool. Executing a manipulation of the argument image can lead to server-side request forgery. The attack c...

CVE-2026-15330

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function buildimagecontent/downloadtodataurl of the file agent/tools/vision/vision.py of the component Vision Tool. Executing a manipulation of the argument image can lead to server-side request forgery. The attack c...

SUSE CVE-2026-10536

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

SUSE CVE-2026-59935

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issu...