CGA-FC4P-X52C-2MPX

Bulletin has no description...

CVE-2026-12142

CVE-2026-12142 affects the NEX-Forms – Ultimate Forms Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) via the internal parameter named '_name[]' , present in all versions up to and including 9.2.2 . Root cause: insufficient input sanitization and output escaping, co...

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

CVE-2026-12158

creationtimestamp| type| source ---|---|--- 2026-07-01 09:18:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6qiao7w2r 2026-07-01 11:42:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgsm4ipy24 2026-07-01 12:19:51+00:00| seen|...

CVE-2026-10538

creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6peyfw52b 2026-07-01 09:26:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpl762ata52k...

CVE-2026-10096

creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6orrwm62u 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6or2tpi2l 2026-07-01 11:36:19+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

CVE-2026-12224

creationtimestamp| type| source ---|---|--- 2026-07-01 09:12:13+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6f6frm32l 2026-07-01 09:12:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6f64vmw2r 2026-07-01 11:39:31+00:00| seen|...

CVE-2026-11883

The WebAuthn Provider for Two Factor WordPress plugin before 2.5.6 does not correctly validate the second-factor authentication response, allowing an attacker who already knows a user's password to bypass the two-factor authentication requirement by submitting a malformed request...

CVE-2026-11883 WebAuthn Provider for Two Factor < 2.5.6 - 2FA Bypass

The WebAuthn Provider for Two Factor WordPress plugin before 2.5.6 does not correctly validate the second-factor authentication response, allowing an attacker who already knows a user's password to bypass the two-factor authentication requirement by submitting a malformed request...

CVE-2026-11883

CVE-2026-11883 affects the WebAuthn Provider for Two Factor WordPress plugin (before 2.5.6). The vulnerability arises from incorrect validation of the second-factor authentication response, enabling an attacker who already knows a user’s password to bypass 2FA by submitting a malformed request. T...

CVE-2026-7830

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

GHSA-GX55-F84R-V3R7

creationtimestamp| type| source ---|---|--- 2026-07-01 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842838632410584 2026-07-01 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkong6fmb23...

UBUNTU-CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

EUVD-2026-40882

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

CVE-2026-7830

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

CVE-2026-56700

creationtimestamp| type| source ---|---|--- 2026-07-01 03:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkkub6hnp2b 2026-07-02 06:09:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnemx25mb2y...

CVE-2026-14191 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

CVE-2026-57962

creationtimestamp| type| source ---|---|--- 2026-07-01 02:30:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhwod6yb26 2026-07-02 13:50:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fgchve2i...

CVE-2026-54899

creationtimestamp| type| source ---|---|--- 2026-07-01 02:25:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhnr7sqg26 2026-07-02 01:13:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3d3qlr22...