VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery ...
VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery
1. Basic Information
Article Title: JVNVU#91736352 Multiple Vulnerabilities in VPS.org One-Click Deployment Templates
Published By: JVN
Publication Date: August 3, 2026 (CERT/CC primary info on July 31, 2026)
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
Critical Paperclip Flaw Allowed Admin Access, Code Execution
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
Key theft in Ruby on Rails – Critical vulnerability with prepared images
vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to eval() ...
Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through…
HashiCorp, Veeam, and Django patch 11 flaws, including cross-tenant token reuse, agent credential exposure, and possible code…
Public exploit details show how CVE-2026-61511 reaches PHP eval() in unpatched vBulletin forums through a visitor-controlled…
CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication...
