CVE-2026-53410

creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjicwo2y2e 2026-07-14 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-16 14:23:57+00:00| seen|...

CVE-2026-52840

Affected software: Easy!Appointments (self-hosted) prior to 1.6.0. Vulnerability: Server-Side Request Forgery (SSRF) in the CalDAV connection test. In Caldav::connect_to_server (application/controllers/Caldav.php:60), the request’s caldav_url is handed to a Guzzle REPORT call without proper schem...

CVE-2026-55040

creationtimestamp| type| source ---|---|--- 2026-07-14 15:03:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116918936175684697 2026-07-14 18:17:37+00:00| seen| https://bsky.app/profile/captechgroup.com/post/3mqmswep6632k 2026-07-14 19:00:53+00:00| seen|...

CVE-2026-58478

SIP 5.2.16 has a server-side request forgery (SSRF) vulnerability when the optional Node-RED plugin is installed. An unauthenticated attacker can supply a malicious callback URL and cause the device to issue arbitrary HTTP requests due to lack of destination validation, aided by the default passp...

CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

CVE-2026-15692

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

CVE-2026-54307

creationtimestamp| type| source ---|---|--- 2026-07-14 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqm67u2njg2l...

CVE-2026-59246

creationtimestamp| type| source ---|---|--- 2026-07-14 12:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5vzj3ce24 2026-07-20 05:46:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lqpopwi2z 2026-07-20 05:46:47+00:00| seen|...

CVE-2026-8384

creationtimestamp| type| source ---|---|--- 2026-07-14 11:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5q2hfk72w 2026-07-20 05:39:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ldikcy42i 2026-07-20 05:44:37+00:00| seen|...

Security update for afterburn

This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. CVE-2026-41677: openssl: out-of-bounds read in PEM password...

CVE-2026-48978

A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a malicious registry or performing a man-in-the-middle attack, could exploit this to...

CVE-2026-53539

A flaw was found in Python-Multipart, a streaming multipart parser. A remote attacker can exploit this vulnerability by submitting a specially crafted application/x-www-form-urlencoded body. This can cause the QuerystringParser to perform inefficient processing, leading to excessive CPU...

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...

CVE-2026-11563

creationtimestamp| type| source ---|---|--- 2026-07-14 09:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvi56bjx2l 2026-07-14 13:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnci5jv2r 2026-07-14 18:00:09+00:00| seen|...

CVE-2026-59083

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

UBUNTU-CVE-2026-59083

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

CVE-2026-59964

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-59083 Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

CVE-2026-59083

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

CVE-2026-59083 Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...