BELL-CVE-2025-29943

Bulletin has no description...

EUVD-2026-3481

The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.7. This is due to the plugin's REST API trusting the x-wemail-user HTTP header to identif...

EUVD-2026-3446

Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-3454

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. Chromium security severity: Medium...

EUVD-2026-3479

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the getitempermissionscheck function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and las...

CVE-2025-68468

creationtimestamp| type| source ---|---|--- 2026-01-20 00:35:53+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mcsvypvlyj2l 2026-02-24 18:04:43+00:00| seen| https://gist.github.com/ultra70/7da8942f1b523c00c5c97c28022f0826 2026-02-25 03:51:15+00:00| seen|...

CVE-2025-68276

creationtimestamp| type| source ---|---|--- 2026-01-20 00:35:52+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mcsvypvlyj2l 2026-02-24 18:04:43+00:00| seen| https://gist.github.com/ultra70/7da8942f1b523c00c5c97c28022f0826 2026-02-25 03:51:15+00:00| seen|...

PT-2026-4337

CVE-2026-23916 - Citrix NetScaler Denial of Service CVE ID : CVE-2026-23916 Published : Jan. 20, 2026, 5:16 a.m. | 1 hour, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

MiracleLinux 9 : cups-2.3.3op2-21.el9 (AXSA:2023-6748:11)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6748:11 advisory. cups: heap buffer overflow may lead to DoS CVE-2023-32324 cups: use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 Tenable has...

EUVD-2026-3328

An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive information or cause unexpected server behavior via the websocketserver/websocketserver.py, WebSocketServer.messagereceived components...

MiracleLinux 9 : keylime-6.5.2-6.el9.ML.1 (AXSA:2023-6400:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6400:04 advisory. keylime: registrar is subject to a DoS against SSL connections CVE-2023-38200 Keylime: challenge-response protocol bypass during agent registration...

EUVD-2026-3333

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

CVE-2025-68616

A Server-Side Request Forgery SSRF Protection Bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources such as localhost services or cloud metadata endpoints even when a developer has implemented a custom urlfetcher to block such...

RHSA-2026:0742

creationtimestamp| type| source ---|---|--- 2026-01-19 17:13:24+00:00| seen| https://gist.github.com/Darkcrai86/ddd5bc33b02f17817c55f6c2c48d87e9...

RHSA-2026:0786

creationtimestamp| type| source ---|---|--- 2026-01-19 17:07:14+00:00| seen| https://gist.github.com/Darkcrai86/db2f1083976905b46a70e2074005d2f9...

RHSA-2026:0804

creationtimestamp| type| source ---|---|--- 2026-01-19 17:05:31+00:00| seen| https://gist.github.com/Darkcrai86/1dc570efdc170c19b28669d32ff4182e...

CVE-2026-1149

creationtimestamp| type| source ---|---|--- 2026-01-19 12:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrmzocqej2y...

EUVD-2026-3220

A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit is now public and may be used...

DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses

Just a few years ago, the cloud was touted as the "magic pill" for any cyber threat or performance issue. Many were lured by the "always-on" dream, trading granular control for the convenience of managed services. In recent years, many of us have learned often the hard way that public cloud servi...

CVE-2024-31583

creationtimestamp| type| source ---|---|--- 2026-01-19 11:35:26+00:00| seen| https://gist.github.com/konard/d776e828509d5f2e3644437ac5400628 2026-01-19 11:37:28+00:00| seen| https://gist.github.com/konard/042845fbf63e049778752df088c0c9e4 2026-01-19 11:37:35+00:00| seen|...