CVE ID :CVE-2026-58372 Published : June 30, 2026, 3:57 p.m. | 2 hours, 18 minutes ago Description :SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single bucket…
Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting…
WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional feature is designed to help users connect with someone…
CVE ID :CVE-2026-13749 Published : June 29, 2026, 4:02 p.m. | 2 hours, 7 minutes ago Description :Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment.…
CVE ID :CVE-2026-41052 Published : June 29, 2026, 3:41 p.m. | 2 hours, 28 minutes ago Description :Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10. Severity:…
CVE ID :CVE-2026-13744 Published : June 29, 2026, 3:40 p.m. | 2 hours, 29 minutes ago Description :Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data,…
CVE ID :CVE-2026-58054 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing users; the user module offers the…
CVE ID :CVE-2026-58053 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow’s container.options string to the Docker job container’s HostConfig and, when configured with privileged:…
CVE ID :CVE-2026-58051 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the…
CVE ID :CVE-2026-58050 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking,…