[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
----------------------------------------------------------------------------
NotCVE Advisory — NotCVE-2026-0015
----------------------------------------------------------------------------
[-] Summary:
Missing authentication for a critical function in the input-leapd daemon of
Input Leap, the open-source keyboard and mouse sharing tool, allows a
local, low-privileged user on Windows to execute ar
[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory
----------------------------------------------------------------------------
NotCVE Advisory — NotCVE-2026-0014
----------------------------------------------------------------------------
[-] Summary:
Improper limitation of a pathname in the drag-and-drop file transfer
feature of Input Leap, the open-source keyboard and mouse sharing tool,
allows a connected peer to write a file outside the conf
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] libpcap (SSA:2026-249-01)
New libpcap packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/libpcap-1.10.7-i586-1_slack15.0.txz: Upgraded.
This libpcap release fixes a number of vulnerabilities.
For more
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] util-linux (SSA:2026-249-03)
New util-linux packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues.
For more inf
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] mozilla-thunderbird (SSA:2026-247-03)
New mozilla-thunderbird packages are available for Slackware 15.0 and -current
to fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz: Upgraded.
This release contains se
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] mozilla-firefox (SSA:2026-247-02)
New mozilla-firefox packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/mozilla-firefox-140.15.0esr-i686-1_slack15.0.txz: Upgraded.
This update contains security fixes
Hi!
We're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those
vulnerabilities. This advisory will also be published at
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html
---
Classification: TLP:GREEN
Internal reference: DOV-8476
Type: CWE-403 (Exposure of File Descriptor to Unintended C
FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)
https://blog.evan.lat/posts/CVE-2026-65053/
the blog talks about two vulns that are chainable together. for the sake of
brevity ill write up on the stored xss one.
in lib/Mime/Status.php, we see a pretty viable xss sink:
$out .= '<tr><td>' . $val . '</td></tr>';
xrefing this we see that most impls are sanitized with the exception of
lib/Mime/Viewer/Appledouble.php:
$data_name = $this->getConf
CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series
CyberDanube Security Research 20260611-0
-------------------------------------------------------------------------------
title| Multiple Denial of Service
product| Dahua DH-IPC-HFW Series
vulnerable version| <=V3.142.0000000.8.R.250826
fixed version| Versions build including and after 2026-03-26.
CVE number| CVE-2026-29115, CVE-2026-29116
impact| High
homepage| https://www.dahuasecurity.com/
found
bmcweb (OpenBMC web server): four vulnerabilities — two unfixed, GHSA without a CVE
Hi all,
Posting a brief summary of a four-finding disclosure on bmcweb (the OpenBMC HTTP/Redfish web server), which ships in
BMC firmware on most modern enterprise servers — Intel, IBM, HPE, NVIDIA, and various ODMs.
Full timeline and analysis on the blog:
https://binreaper.pages.dev/posts/2026-05-27-bmcweb-disclosure/
## Why bmcweb matters
A Baseboard Management Controller boots before th
Synology stale DNS allows practical interception of traffic from vulnerable DSM clients
# Synology stale DNS allows practical interception of traffic from
vulnerable DSM clients
Vendor case: 904909
Suggested severity: High
## Customer advisory
Synology customers using the affected DSM and Relayd versions listed below
should upgrade immediately.
The relevant man-in-the-middle vulnerabilities were fixed in DSM
6.2.3-25426 Update 3. Customers should install the latest DSM version
av
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-05-13-2026-1 Safari 26.5
Safari 26.5 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127121.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
WebKit
Available for: macOS Son
[KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability
---------------------------------------------------------------------
Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability
---------------------------------------------------------------------
[-] Software Link:
https://control-webpanel.com
[-] Affected Versions:
Version 0.9.8.1224 and prior versions.
[-] Vulnerability Description:
User input passed through the "userRes"
------------------------------------------------------------------------
OpenBSD sppp_pap_input: PAP Authentication Bypass via Zero-Length bcmp
------------------------------------------------------------------------
Affected: OpenBSD all versions through 7.6 (fixed in -current)
Vendor: OpenBSD
Severity: High
Reporter: Argus
Date: 2026-06-16
1. SUMMARY
==========
The sppp_pap_input(
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
Beats Firmware Update 1B211 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127557.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
The Asterisk Development Team would like to announce security release
Asterisk 23.4.1.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.4.1
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 23.4.1
## Change Log for Release asterisk-23.4.1
### Links:
- [Full Cha
The Asterisk Development Team would like to announce security release
Asterisk 22.10.1.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.10.1
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 22.10.1
## Change Log for Release asterisk-22.10.1
### Links:
- [Full
The Asterisk Development Team would like to announce security release
Asterisk 21.12.3.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/21.12.3
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 21.12.3
## Change Log for Release asterisk-21.12.3
### Links:
- [Full
The Asterisk Development Team would like to announce security release
Certified Asterisk 22.8-cert3.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3
and
https://downloads.asterisk.org/pub/telephony/certified-asterisk
Repository: https://github.com/asterisk/asterisk
Tag: certified-22.8-cert3
## Change Log f
NotCVE registry index — public records of vulnerabilities that shipped without a CVE
----------------------------------------------------------------------------
NotCVE Registry Index — 2026-07-16
----------------------------------------------------------------------------
[-] About the NotCVE registry:
NotCVE (https://notcve.org) assigns public identifiers to real, verifiable
vulnerabilities that did not receive a CVE — typically because the affected
vendor did not acknowledge
ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver
Hi all,
I'm disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys /
AsusBSItf.sys kernel driver, shipped with ASUS Business Manager and
Software Manager. ASUS has assigned the CVE and published a vendor advisory
with countermeasures.
Summary: The driver exposes a device (\\.\bsitf, admin-required to open)
with an IOCTL that allocates a caller-specified amount of physically
contiguous
Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated token. An authenticated learner
can modify this identifier to bypass configured limits, launch
concurrent lab instances, and consume another learner's allocation.
Skillable states that no fix is planned for the legacy SCORM launch
SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Authentication Bypass for SafeLine SL6 and SL6+
===============================================
gain unauthorized administrative access to the device configuration.
Metadata
========
* Affected product: SafeLine SL6/SL6+
* Affected version: Introduced in version 4.82, patched in version 4.97
* Vendor: SafeLine
* Problem type(s): CWE-305 Authenti
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-06-29-2026-3 Safari 26.5.2
Safari 26.5.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127685.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Web Extensions
Available fo
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2
macOS Tahoe 26.5.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127595.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
IOGPUFamily
Avail
APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127594.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories
------------------------------------------------------
Discuz! <= X5.0 OCR-based CAPTCHA Bypass Vulnerability
------------------------------------------------------
[-] Software Link:
https://www.discuz.vip
[-] Affected Versions:
Version X5.0, releases 20260320 through 20260610.
Older X3.4 and X3.5 releases may be affected too.
[-] Vulnerability Description:
A security weakness in the CAP
-------------------------------------------------------------
Discuz! X5.0 (UC_KEY) Cross-Context Token Reuse Vulnerability
-------------------------------------------------------------
[-] Software Link:
https://www.discuz.vip
[-] Affected Versions:
Version X5.0, releases 20260320 through 20260501.
[-] Vulnerability Description:
The vulnerable code is located within the /config/config_uc