CVE Vulnerabilities - 29 June 2026

Old versions of SimpleHelp allow hackers to access the system without a password. This happens when the system uses a specific authentication method. To fix this, update to the latest version of Simpl...

Versions 7.4.8 and earlier of Paid Videochat Turnkey Site allow an attacker to delete any file on the server, potentially disrupting the site's functionality. This issue is particularly concerning bec...

Appsmith's built-in reverse proxy had no password protection, allowing a malicious user to take control of the proxy and potentially harm the system. This issue has been fixed in version 2.1. Users sh...

Some AWS load balancers might not properly check requests if they use a new internet protocol. This can let hackers get past security rules. To fix this, make sure your load balancer is set to inspect...

AWS WAF managed rules might be bypassed if a hacker sends a special type of HTTP request. This issue has been fixed by AWS, so no action is needed from customers. Amazon CloudFront is a service that h...

The Gorse software has a security flaw that allows attackers to access and potentially steal or delete sensitive user data without being authorized. This is a concern because it could lead to a data b...

A security patch has been applied to rclone for Root:Go to prevent unauthorized access to files. This is important because it affects how Root:Go handles sensitive data. If you're using rclone for Roo...

A vulnerability in rclone allows unauthorized access to files on a Root system. This is a significant risk because it could allow malicious users to access sensitive data. To protect your system, upda...

An attacker can execute code on your computer and gain access to your pyLoad account without needing a password. This can lead to stolen passwords, hijacked sessions, and complete control of your comp...

A vulnerability in Node.js TLS (Transport Layer Security) hostname handling can allow attackers to secretly change the trusted server identity. This affects Node.js versions 22, 24, and 26. To protect...

A security issue in Coolify's web interface allows users from one team to access and deploy servers managed by another team. This is fixed in version 4.0.0-beta.474. To stay secure, ensure you're runn...

If you're using an older version of Snowflake CLI, a malicious SQL statement could trick your system into sending unauthorized requests to internal networks. To protect yourself, update to Snowflake C...

A previous version of PraisonAI's MCP server allowed an attacker to write files outside of a specific directory, potentially leading to code execution. This issue has been fixed in version 4.6.34. To ...

A security flaw in OpenVPN's LuCI configuration tool allows an authenticated user to gain root access to the system. This is a concern for systems with sensitive data, as an attacker could potentially...

A bug in Apache Tomcat's logging feature can cause certain security settings to be missed, potentially leading to unauthorized access to sensitive information. Affected users should upgrade to the lat...

A security issue in older versions of Apache Tomcat may cause some security information to be missing from logs. This could make it harder to detect and respond to security threats. To fix this, updat...

Apache Tomcat versions 11, 10, and 9 have a problem with certificate revocation lists (CRLs) that don't properly check for invalid certificates. This could allow malicious certificates to be used. To ...

A security issue in iOS, iPadOS, and macOS allowed a malicious app to crash the system or damage its memory. This has been fixed in recent updates, but it's essential to install the latest versions to...

The Alexantr Filemanager version 1.0 has a security issue that allows an attacker to run malicious code on a website. This could potentially allow an attacker to take control of the website or steal s...

The Google MCP Toolbox HTTP tool can make unauthorized API requests to unintended endpoints on the same target host. This is because an attacker can manipulate the URL to escape the intended path, pot...

An authenticated user can upload a malicious file to the pyload download folder, potentially allowing an attacker to execute arbitrary code on the server. This is a serious security risk because it al...

Appsmith, a platform for building internal tools and dashboards, had a security issue before version 2.1. This issue allowed an authenticated user to access internal services within the same container...

A security update has been released for Red Hat Flatpak to fix a vulnerability that could allow an attacker to access files they shouldn't have access to. This update is important for users who rely o...

A security issue was found in Coolify's way of handling user input. This could allow an attacker with valid access to run malicious code on the server. Update to the latest version of Coolify to fix t...

Coolify's network management feature had a security flaw that allowed authorized users to execute commands on managed servers as if they were the server administrator. This could be exploited to take ...