CVE-2025-36372

creationtimestamp| type| source ---|---|--- 2026-07-03 12:16:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjmwiyzj2c...

CVE-2026-12166

creationtimestamp| type| source ---|---|--- 2026-07-03 10:24:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqdez7upd2n...

CVE-0000-0003

creationtimestamp| type| source ---|---|--- 2026-07-03 09:17:40+00:00| seen| https://gist.github.com/tu-trinh-scale/79e43e3de2389e25cad883bad19c0745 2026-07-03 10:08:50+00:00| seen| https://gist.github.com/tu-trinh-scale/f3ba6e1e2507e088bc63b94906ba5a45 2026-07-03 11:56:23+00:00| seen|...

CVE-2026-7839

creationtimestamp| type| source ---|---|--- 2026-07-03 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpq6zuwhna2s 2026-07-09 11:59:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7liax6oy2y 2026-08-03 21:00:18+00:00| seen|...

MINI-R85R-5PRR-452R

Bulletin has no description...

MINI-HMFW-6CWW-5JXP

Bulletin has no description...

MINI-J8C7-VW62-RGPJ

Bulletin has no description...

CVE-2026-12920

creationtimestamp| type| source ---|---|--- 2026-07-03 06:02:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuqn3v7h2u 2026-07-03 09:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpq7jyedgu2m 2026-07-03 19:26:14+00:00| seen|...

CVE-2026-57351

creationtimestamp| type| source ---|---|--- 2026-07-03 05:11:24+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mppruf5djs2n 2026-07-20 17:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3tu2v4kz27 2026-07-21 03:44:08+00:00| seen|...

SUSE CVE-2026-4360

In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract function...

CVE-2026-13373

creationtimestamp| type| source ---|---|--- 2026-07-03 03:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpplhrjxmc2i 2026-07-03 19:00:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra6phkd22u...

CVE-2026-57730

creationtimestamp| type| source ---|---|--- 2026-07-03 00:32:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcbblchq2y...

CVE-2026-25782: Authorization Bypass Through User-Controlled Key

Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...

CVE-2026-14608: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=viewstudent of the component POST Handler. The manipulation of the argument ID leads to authorization...

CVE-2026-9230: Missing Authorization

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-59234: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key CWE-639 in CalendarDeleteEventController app/Http/Controllers/Calendar/CalendarDeleteEventController.php, exposed at GET /calendar/event/delete/id, in Prospero Flow CRM before 5.5.3 allows a remote, authenticated attacker to delete arbitrary calend...

CVE-2026-59096

creationtimestamp| type| source ---|---|--- 2026-07-02 23:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppafhykwf2t 2026-07-03 15:10:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdc7nha2n...

MINI-PXJP-45FH-2J76

Bulletin has no description...

AZL-92103 CVE-2026-38968 affecting package ntopng 5.2.1-6

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

Summary The fix for CVE-2026-46339 unauthenticated RCE via unprotected MCP plugin routes introduced a local-only access gate in src/dashboardGuard.js that restricts spawn-capable routes /api/mcp/, /api/tunnel/, /api/cli-tools/ to loopback requests. The gate determines "local" by inspecting the Ho...