GeoServer Demo Request Endpoint - Server Side Request Forgery

It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...

GHSA-724G-MXRG-4QVM vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-XRR7-CWRW-39VW vulnerabilities

Vulnerabilities for packages: firefox...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)

Last week, there were 223 vulnerabilities disclosed in 175 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 88 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

CVE-2026-17873

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

EUVD-2025-210556

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

CVE-2026-13425

creationtimestamp| type| source ---|---|--- 2026-07-29 11:36:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrrtj6pzpx23 2026-07-29 11:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrue7z7kt2b...

CVE-2026-13890

An out of bounds read flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500601345...

CVE-2026-14404

An inappropriate implementation flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513337989...

CVE-2026-64355

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...

EUVD-2026-48434

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)

Last week, there were 75 vulnerabilities disclosed in WordPress Core, 68 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 50 Vulnerability Researchers that contributed to WordPress Security last week. Review those...

CVE-2026-13181

creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b...

CVE-2026-16364

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqnhcmd52k...

CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60458

...

CVE-2026-60327

...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...