CVE-2026-12610

creationtimestamp| type| source ---|---|--- 2026-06-30 10:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiscbuw6r2w 2026-07-30 16:31:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mruuhjm6g22i 2026-07-30 16:31:36+00:00| seen|...

CVE-2026-14164

creationtimestamp| type| source ---|---|--- 2026-06-30 10:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirik6atm2z 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...

CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...

EUVD-2026-40271

Cross-Site Scripting XSS vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the victim’s browser by sending a malicious URL via the 'urlDestino' parameter in '/portal.do'. This vulnerability can be...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-57632

creationtimestamp| type| source ---|---|--- 2026-06-30 05:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiartr3yp2j...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress (versions up to 4.0.5) is vulnerable to Stored Cross-Site Scripting via the Link URL field due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access can store a pay...

CVE-2026-58302

creationtimestamp| type| source ---|---|--- 2026-06-30 02:29:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxgqfnwi2t 2026-06-30 04:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi5n3bh7l2o...

SUSE CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-12243

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2026-54442

Name of the Vulnerable Software and Affected Versions @cedar-policy/authorization-for-expressjs versions prior to 0.3.0 Description This middleware integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions. A discrepancy exists because the middleware uses...

PT-2026-53940

Name of the Vulnerable Software and Affected Versions Webmention versions prior to 5.8.1 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping of user-supplied Microformat 2 MF2 author properties. An unauthenticated attacker can inject arbitrary...

Important: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via...

PT-2026-53811

Name of the Vulnerable Software and Affected Versions Editorial Rating – Product Review & Rating System versions prior to 4.0.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access and above to perform Stored Cross-Site...

CVE-2026-56968

creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...

CVE-2026-54829

creationtimestamp| type| source ---|---|--- 2026-06-29 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mphmmd2wiq2i...

CVE-2026-43722

creationtimestamp| type| source ---|---|--- 2026-06-29 22:34:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkc6ytr427 2026-07-01 02:50:09+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...

CVE-2026-43720

creationtimestamp| type| source ---|---|--- 2026-06-29 22:33:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkaonv6522 2026-07-01 02:50:04+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...

CVE-2026-53429

creationtimestamp| type| source ---|---|--- 2026-06-29 22:19:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjheouc225...

CVE-2026-43725

creationtimestamp| type| source ---|---|--- 2026-06-29 22:18:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjez6vuf23 2026-07-01 02:50:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...