CLSA-2026-1779212122 sos: Fix of CVE-2022-2806

CVE-2022-2806: ovirt plugin: filter out all password keys in answer files...

WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Image Deletion vulnerability discovered by Bao Luu Gia Nguyen in WordPress Plugin NextGEN Gallery versions = 4.2.0...

SUSE-SU-2026:21743-1 Security update for kernel-livepatch-MICRO-6-0_Update_22

This update for kernel-livepatch-MICRO-6-0Update22 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 22...

EUVD-2026-30039

protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion...

GHSA-FHVH-VW7H-9XF3 libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case

The AVX2 implementation of ML-DSA verification incorrectly implemented the usehint function, mishandling an edge case that should lead to signature rejection. Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if th...

libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server

A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.32 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.14.32 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.14.32 security, enhancement & bug fix update FIXED BUGS: ========== CVEs: ========== CVE-2025-52881...

Allocation of Resources Without Limits or Throttling

Overview Scriban.Signed is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Affected versions of this package are vulnerable to Allocation of Resources Without...

CVE-2026-7504

creationtimestamp| type| source ---|---|--- 2026-05-19 12:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gy7dnug2e 2026-05-19 13:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7hkblcqz2t 2026-06-01 11:03:09+00:00| seen|...

CVE-2026-8827

creationtimestamp| type| source ---|---|--- 2026-05-19 12:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gotmhok2k 2026-05-19 13:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7h5lczbw2e...

CVE-2026-41054

creationtimestamp| type| source ---|---|--- 2026-05-19 12:47:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7gf7pxbp2e 2026-05-19 14:02:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7klht65r2b 2026-05-20 00:38:39+00:00| seen|...

Exploit for CVE-2026-42945

CVE-2026-42945 PoC Go This tool is designed for detecting a...

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC. "The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days," the...

CVE-2026-45434

creationtimestamp| type| source ---|---|--- 2026-05-19 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116600774685376629 2026-05-19 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j 2026-05-19 17:49:26+00:00| seen|...

Exploit for Type Confusion in Apple Safari

CVE-2024-23222 — WebKit Type Confusion → iOS 16.4.1 Sandbox Es...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.9.4

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.9.4 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.9.4 release that simplify the process of...

CVE-2026-4858

creationtimestamp| type| source ---|---|--- 2026-05-19 00:51:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-mattermost 2026-05-21 12:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeep2dusz2k 2026-05-21 13:09:09+00:00| seen|...

Detecting Data Exfiltration through I2P Anonymity Networks: A Two-Phase Machine Learning Approach

The Invisible Internet Project I2P provides strong anonymity through garlic routing and distributed network architecture, making it attractive for legitimate privacy needs. Nevertheless, the same properties can be exploited by malicious actors to steal sensitive information from corporate network...

EUVD-2026-30950

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20762-1 Rating: important References: bsc1170826 bsc1255111 bsc1264499 bsc1264500 bsc1264501 bsc1264502 bsc1264503 bsc1264504 bsc1264505 bsc1264506...