CVE-2026-58014

creationtimestamp| type| source ---|---|--- 2026-06-30 14:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjatls7xm2z 2026-07-02 05:52:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndpmanhq2i 2026-07-21 12:01:01+00:00| seen|...

CVE-2026-13474

creationtimestamp| type| source ---|---|--- 2026-06-30 14:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7prwa4f2j 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58010

creationtimestamp| type| source ---|---|--- 2026-06-30 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6dq57qp2t 2026-07-03 12:18:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjqorsrj2j 2026-07-05 03:23:39+00:00| seen|...

CVE-2026-58374

creationtimestamp| type| source ---|---|--- 2026-06-30 14:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj67lqvub23 2026-07-06 12:03:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpy2c74dl62h...

CVE-2026-47105

creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...

CVE-2026-14162

Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...

CVE-2026-14162

Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...

CVE-2026-12610

creationtimestamp| type| source ---|---|--- 2026-06-30 10:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiscbuw6r2w 2026-07-30 16:31:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mruuhjm6g22i 2026-07-30 16:31:36+00:00| seen|...

CVE-2026-14164

creationtimestamp| type| source ---|---|--- 2026-06-30 10:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirik6atm2z 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...

CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...

EUVD-2026-40271

Cross-Site Scripting XSS vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the victim’s browser by sending a malicious URL via the 'urlDestino' parameter in '/portal.do'. This vulnerability can be...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-57632

creationtimestamp| type| source ---|---|--- 2026-06-30 05:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiartr3yp2j...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress (versions up to 4.0.5) is vulnerable to Stored Cross-Site Scripting via the Link URL field due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access can store a pay...

CVE-2026-58302

creationtimestamp| type| source ---|---|--- 2026-06-30 02:29:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxgqfnwi2t 2026-06-30 04:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi5n3bh7l2o...

SUSE CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-12243

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-56224: Session Fixation

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...

CVE-2026-12560: Improper Neutralization of Input During Web Page Generation

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-10562: URL Redirection to Untrusted Site

An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...