CVE-2021-31698

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:11+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-66409

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:08+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-66406

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:06+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-57669

creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...

GHSA-52JP-GJ8W-J6XH

creationtimestamp| type| source ---|---|--- 2026-07-31 04:31:56+00:00| seen| https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62...

CVE-2026-55495

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUTRELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a filename, allowing slash and dot-dot segments to escape the source file directory and create or conditionally overwrite...

CVE-2026-6890

creationtimestamp| type| source ---|---|--- 2026-07-31 04:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/75upzhvzgudry...

CVE-2026-51274

creationtimestamp| type| source ---|---|--- 2026-07-31 04:03:33+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrw34u4xo32i...

CVE-2026-18157

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrw2xsw67y2o 2026-07-31 04:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/htuiez2lpkio5...

CVE-2026-14540

creationtimestamp| type| source ---|---|--- 2026-07-31 03:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt 2026-07-31 12:48:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724 2026-08-01 04:58:43+00:00| seen|...

CVE-2026-51245

creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...

GHSA-H669-8M4G-R2HC

creationtimestamp| type| source ---|---|--- 2026-07-31 03:34:09+00:00| seen| https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f...

CVE-2026-51243

creationtimestamp| type| source ---|---|--- 2026-07-31 03:26:49+00:00| seen| https://gist.github.com/programmervuln/93176789b1e5b46d8aba1038a7d797d9...

GHSA-5P9G-J988-PCWV

creationtimestamp| type| source ---|---|--- 2026-07-31 02:31:09+00:00| seen| https://gist.github.com/alon710/eb7bbb63a594430d7d6ab18e1b915ebd...

GHSA-4JC5-G844-4X33

creationtimestamp| type| source ---|---|--- 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...

CVE-2026-66420

creationtimestamp| type| source ---|---|--- 2026-07-31 01:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqvtqxt22a 2026-07-31 12:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwy427mt52i...

CVE-2026-51270

creationtimestamp| type| source ---|---|--- 2026-07-31 00:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrvnlus5te2e...

PT-2026-66836

Name of the Vulnerable Software and Affected Versions Thumbor versions prior to 7.8.0 Description The ALLOWED SOURCES configuration, designed to restrict the hosts from which the HTTP loader fetches images, fails to escape dots when processing plain-string entries. These strings are passed direct...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale

The Model Context Protocol MCP has seen rapid adoption since its November 2024 launch, with over 21,000 server instances detectable on the public internet. We present the first dynamic behavioral security assessment of internet-facing MCP servers, combining passive discovery across eleven data...