CVE-2026-16337

creationtimestamp| type| source ---|---|--- 2026-07-20 20:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr45zfra2n2z...

CVE-2026-53595

creationtimestamp| type| source ---|---|--- 2026-07-20 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr45zei2rd2u 2026-07-20 21:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c4cmak22e 2026-07-20 22:00:43+00:00| seen|...

CVE-2026-57348

creationtimestamp| type| source ---|---|--- 2026-07-20 20:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr45vwal5j2u 2026-07-21 06:44:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr57gtuqjo2e 2026-07-21 16:44:08+00:00| seen|...

zaproxy vw2026-07-14

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

CVE-2026-63108

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43i5ubog2q 2026-07-20 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bbgq76c2i...

EUVD-2026-46088

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...

CVE-2026-32806

creationtimestamp| type| source ---|---|--- 2026-07-20 19:57:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr43ck2wnm2j...

CVE-2026-60032

creationtimestamp| type| source ---|---|--- 2026-07-20 19:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42rp2faa23 2026-07-20 21:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46shkvtn23...

CVE-2026-61425

creationtimestamp| type| source ---|---|--- 2026-07-20 19:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42rnsk3j2r 2026-07-20 21:02:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46wcuhar2e...

CVE-2026-42168

creationtimestamp| type| source ---|---|--- 2026-07-20 19:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42o37kk22a...

CVE-2026-1538

creationtimestamp| type| source ---|---|--- 2026-07-20 19:45:24+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr42mvfzfv2v...

CVE-2026-27409

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr42kn3nrv2j 2026-07-21 05:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr543jkhw32u 2026-07-21 15:44:10+00:00| seen|...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k 2026-09-05 13:00:04+00:00| published-proof-of-concept| Telegram/EWyzaOudgwaNXoA105LhIEanQUj5hipt6FRZ98nQPfTHQ 2026-09-06 00:00:46+00:00|...

CVE-2025-51677

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kiwv652v...

CVE-2026-64193

creationtimestamp| type| source ---|---|--- 2026-07-20 19:20:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3z7l5xjc2r 2026-07-21 19:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4thnj32z 2026-07-23 08:02:09+00:00| seen|...

CVE-2026-54538

creationtimestamp| type| source ---|---|--- 2026-07-20 19:15:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3yxvw2re2j...

CVE-2026-64194

creationtimestamp| type| source ---|---|--- 2026-07-20 19:15:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3ywlaqgx26...

CVE-2026-15788

CVE-2026-15788 concerns BuildKit on Windows Containers (WCOW). The issue is that the cache mount source= selector does not detect NTFS directory junctions inside the cache root, allowing a build authored by an untrusted user to read arbitrary host files reachable to the BuildKit daemon process. A...

CVE-2026-55645

creationtimestamp| type| source ---|---|--- 2026-07-20 19:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3yoxhlpl23...

GHSA-9JJ8-V89V-XJVW changedetection.io is vulnerable to unauthenticated static path traversal

Summary The /static// route accepts group="..", which causes sendfromdirectory"static/..", filename to execute. This moves the base directory up to /app/changedetectionio, enabling unauthenticated local file read of application source files e.g., flaskapp.py. Severity is low information disclosur...