Important: Red Hat Security Advisory: yggdrasil security update

An update for yggdrasil is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2026-7288

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

CVE-2026-7289

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7289

The CVE-2026-7289 entry concerns D-Link DIR-825M (firmware version 1.1.12). A vulnerability in the function sub_414BA8 of /boafrm/formWanConfigSetup allows manipulation of the submit-url argument to trigger a buffer overflow, enabling a remote attack. Public exploitation appears to be available. ...

CVE-2026-7289 D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

EUVD-2026-26067

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

USN-8217-1: follow-redirects vulnerabilities

It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2022-0155 It was discovered that...

CVE-2026-23558

creationtimestamp| type| source ---|---|--- 2026-04-28 12:54:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkkmx3sy7i2s 2026-04-29 01:49:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-citrix-xenserver 2026-04-29 12:45:35+00:00| seen|...

CVE-2026-40980

creationtimestamp| type| source ---|---|--- 2026-04-28 12:18:03+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkkkritijh27...

GHSA-X2QX-6953-8485

creationtimestamp| type| source ---|---|--- 2026-04-28 12:00:29+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mkkjx4rbxg2s...

Server-side Request Forgery (SSRF)

Overview @dadigua/hyperchat is a HyperChat Core - Node.js backend and CLI tool with AI chat, MCP support Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch function in the AI Proxy Middleware component when processing the baseurl argument. An attack...

EUVD-2026-26001

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...

CVE-2026-7234 BrowserOperator browser-operator-core server.js startsWith path traversal

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...

CVE-2026-31629

creationtimestamp| type| source ---|---|--- 2026-04-28 05:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjvsiev3j2n 2026-07-02 05:50:16+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-42208

creationtimestamp| type| source ---|---|--- 2026-04-28 05:12:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjt6gwxzm25 2026-04-28 09:39:14+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mkkc2kw66e2u 2026-04-28 16:43:02+00:00| seen|...

CVE-2026-31627

creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshysxsk2z 2026-07-02 05:50:12+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-31644

creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshrf7fs2z 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31638

creationtimestamp| type| source ---|---|--- 2026-04-28 04:28:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqo5aoza2z...

CVE-2026-31637

creationtimestamp| type| source ---|---|--- 2026-04-28 04:27:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqnvpjxx2f 2026-07-02 05:50:21+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-7221

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...