CVE ID :CVE-2026-24253 Published : Aug. 4, 2026, 5:22 p.m. | 58 minutes ago Description :NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of…
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of…
CVE ID :CVE-2026-61524 Published : Aug. 3, 2026, 5:19 p.m. | 53 minutes ago Description :WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading…
CVE ID :CVE-2026-61523 Published : Aug. 3, 2026, 5:18 p.m. | 54 minutes ago Description :WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content…
CVE ID :CVE-2026-68945 Published : Aug. 3, 2026, 5:16 p.m. | 56 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated…
CVE ID :CVE-2026-69149 Published : Aug. 3, 2026, 5:16 p.m. | 56 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting…
CVE ID :CVE-2026-65321 Published : Aug. 2, 2026, 3:16 p.m. | 4 hours, 49 minutes ago Description :PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes…
CVE ID :CVE-2026-68581 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences…
CVE ID :CVE-2026-67356 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity().createUser() without permission checks. Attackers with UPDATE_SCHEMA…
CVE ID :CVE-2026-68579 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client’s CliprdrStream_Read function (client). When an OLE paste consumer (e.g. explorer.exe)…