122352 matches found
Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale
The Model Context Protocol MCP has seen rapid adoption since its November 2024 launch, with over 21,000 server instances detectable on the public internet. We present the first dynamic behavioral security assessment of internet-facing MCP servers, combining passive discovery across eleven data...
PT-2026-66706
Name of the Vulnerable Software and Affected Versions ShopMonitor.io versions prior to 1.2.0 Description The plugin fails to properly restrict its email-rerouting test mode, relying on a trusted-source check that can be bypassed using client-supplied request headers. This allows unauthenticated...
Google Chrome Navigation Unauthorized Access
The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
GitLab 16.6 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6336)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthoriz...
GHSA-HR7P-WG7R-HG9M
creationtimestamp| type| source ---|---|--- 2026-07-30 23:32:08+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3...
opencode v1.18.10
The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...
CVE-2026-18064
creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk7fn6oy23 2026-07-31 09:20:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrwmuh3w7e2j...
CVE-2026-63559
creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk7772zo22...
CVE-2026-66421
creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y 2026-07-31 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a 2026-07-31 12:44:04+00:00| seen|...
CVE-2026-55768
creationtimestamp| type| source ---|---|--- 2026-07-30 22:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i756bnxfs3slr...
GHSA-QQ9Q-XGM3-XV9G
creationtimestamp| type| source ---|---|--- 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47...
CVE-2026-11536
creationtimestamp| type| source ---|---|--- 2026-07-30 22:16:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrvhpxhewy2y 2026-08-06 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgbdb2yns2v...
envocabulary v1.0.4
envocabulary For every variable in your current shell, find the file and line that set it — or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...
CVE-2026-67207
creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdiobq3d2q 2026-07-31 12:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuv6omv24...
CVE-2026-67206
creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...
CVE-2026-66803
creationtimestamp| type| source ---|---|--- 2026-07-30 20:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvde3fur622 2026-07-30 22:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e6ukxlsbup2xn 2026-07-31 01:30:28+00:00| seen|...
xalgorix v4.5.119
Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...
GHSA-JX74-CQJV-2C67
creationtimestamp| type| source ---|---|--- 2026-07-30 20:33:08+00:00| seen| https://gist.github.com/alon710/c5ece1b4b71f33d4bb332d0422fd7596...
CVE-2026-48499
creationtimestamp| type| source ---|---|--- 2026-07-30 20:23:53+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbgw5k5s2c 2026-07-30 20:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvdahgdbl23...