CVE-2026-54431

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

EUVD-2026-41277

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

CVE-2026-14395

creationtimestamp| type| source ---|---|--- 2026-07-02 08:24:48+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:55:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoiqhc3pm2y...

CVE-2026-11592

creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpnlnyjks52f 2026-07-02 08:25:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnmb2b5xh2m 2026-07-02 20:07:42+00:00| seen|...

CVE-0000-0001

creationtimestamp| type| source ---|---|--- 2026-07-02 07:56:25+00:00| seen| https://gist.github.com/tu-trinh-scale/265fe56213773656e2eb7ef2f25c2394 2026-07-02 07:56:27+00:00| seen| https://gist.github.com/tu-trinh-scale/14715efedc4ce81a9789a4cbdcf13286 2026-07-03 08:17:56+00:00| seen|...

CVE-0000-0002

creationtimestamp| type| source ---|---|--- 2026-07-02 07:56:25+00:00| seen| https://gist.github.com/tu-trinh-scale/265fe56213773656e2eb7ef2f25c2394 2026-07-02 07:56:27+00:00| seen| https://gist.github.com/tu-trinh-scale/14715efedc4ce81a9789a4cbdcf13286 2026-07-03 09:17:40+00:00| seen|...

CVE-2026-51946

creationtimestamp| type| source ---|---|--- 2026-07-02 07:17:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnih6gcem2k 2026-07-02 07:24:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnit5xhki22 2026-07-03 12:06:17+00:00| seen|...

WordPress Perfmatters plugin <= 2.6.4 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by daroo in WordPress Plugin perfmatters versions = 2.6.4...

OPENSUSE-SU-2026:21205-1 Security update for docker-stable

This update for docker-stable fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

SUSE CVE-2026-58011

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...

CVE-2026-14082

creationtimestamp| type| source ---|---|--- 2026-07-02 06:23:17+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnffzighe2f 2026-07-02 06:23:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnffzq3dt2q 2026-07-02 07:51:49+00:00| seen|...

CVE-2026-14017

creationtimestamp| type| source ---|---|--- 2026-07-02 06:22:11+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnfe2bdbd2i 2026-07-02 06:22:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfe2jtr527 2026-07-02 07:49:29+00:00| seen|...

CVE-2026-11781 Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX

The Adminify WordPress plugin before 4.2.10 does not perform per-user read-capability checks on the results returned by one of its administration search features, allowing users with a low-privilege role Contributor to disclose non-public content that WordPress would not otherwise expose to them,...

CVE-2026-13987

creationtimestamp| type| source ---|---|--- 2026-07-02 04:20:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6la3e4l2b 2026-07-02 04:20:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn6ld3aon2g 2026-07-02 07:48:23+00:00| seen|...

K000162034: Node.js vulnerability CVE-2026-48617

Security Advisory Description A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported...

CVE-2026-14059

creationtimestamp| type| source ---|---|--- 2026-07-02 03:41:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4fl5blx2o 2026-07-02 03:42:01+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn4fmq5in2i 2026-07-02 07:50:58+00:00| seen|...

CVE-2026-14069

creationtimestamp| type| source ---|---|--- 2026-07-02 03:41:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4exh5l626 2026-07-02 03:41:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn4ez54yr2s 2026-07-02 07:51:21+00:00| seen|...

CVE-2026-57266

GeoWebPlayer (Websocket Server component used by GV-VMS/GV-Cloud) contains multiple index-out-of-bounds vulnerabilities in its websocket command handling, allowing an attacker-supplied index to access arrays and trigger out-of-bounds reads/writes or call out-of-bounds function pointers. Documente...

EUVD-2026-41228

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

CVE-2026-57266

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...