CVE-2026-57311

creationtimestamp| type| source ---|---|--- 2026-07-20 16:00:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3o3ia3e62j 2026-07-20 16:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-57309 2026-07-20 22:55:53+00:00| seen|...

CVE-2026-54910

creationtimestamp| type| source ---|---|--- 2026-07-20 16:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2yb6fc2m 2026-07-31 23:31:28+00:00| seen| https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f 2026-08-01 00:00:16+00:00| seen|...

CVE-2026-63090

creationtimestamp| type| source ---|---|--- 2026-07-20 16:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2rowxc2u 2026-07-20 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vujr4dm2a 2026-07-21 04:06:04+00:00| seen|...

CVE-2026-16244

creationtimestamp| type| source ---|---|--- 2026-07-20 15:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3nsjha762i...

CVE-2026-63429 HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, POST /api/upload has no authentication guard, no global guard, no form-context validation, no openToken requirement, and no session cookie check. Any anonymous internet user can upload files PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, MP...

EUVD-2026-45985

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, completeSubmission accepts a hiddenFields: id, name, value array from the submitter and stores it verbatim in submission.hiddenFields, without validating the supplied id/name against the form's declared form.hiddenFields schema...

CVE-2026-57350

creationtimestamp| type| source ---|---|--- 2026-07-20 15:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3n5i75v72h 2026-07-21 01:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4ooe32wi2u 2026-07-21 11:44:09+00:00| seen|...

CVE-2026-46410

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

GHSA-6Q95-FCWC-4H44

creationtimestamp| type| source ---|---|--- 2026-07-20 15:00:03+00:00| seen| https://t.me/bdufstecru/3329 2026-07-21 00:00:38+00:00| published-proof-of-concept| https://t.me/bdufstecru/3329...

CVE-2026-39359

creationtimestamp| type| source ---|---|--- 2026-07-20 15:00:03+00:00| seen| https://t.me/bdufstecru/3329 2026-07-21 00:00:38+00:00| published-proof-of-concept| https://t.me/bdufstecru/3329...

CVE-2026-57349

creationtimestamp| type| source ---|---|--- 2026-07-20 14:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3js6prby2q 2026-07-21 00:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4lczxpok23 2026-07-21 10:44:09+00:00| seen|...

CVE-2026-46410 FileBrowser Quantum: unauthenticated user share share info

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

CVE-2026-46410

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

CVE-2026-46410

FileBrowser Quantum exposes sensitive share information (source and path) to unauthenticated users. Affected versions are prior to 1.3.2-stable and 1.4.1-beta. The issue is fixed in 1.3.2-stable and 1.4.1-beta. No public workarounds are documented in the provided sources. Remediation: upgrade to ...

CVE-2026-46410 FileBrowser Quantum: unauthenticated user share share info

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

CVE-2026-64623

creationtimestamp| type| source ---|---|--- 2026-07-20 14:05:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3hmy6bbm2b...

EUVD-2026-45948

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Fileeditor module enforces an extension allowlist 'css','js','html','txt','json','sql','md' on content-write operations saveFile, createFile, but two destructive endpoints — deleteFileOrFolder and...

CVE-2026-64621

creationtimestamp| type| source ---|---|--- 2026-07-20 13:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3h32uwig2b 2026-07-21 04:04:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4wik2cxe2s...

CVE-2026-63747

creationtimestamp| type| source ---|---|--- 2026-07-20 13:41:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3gbhuj5j2j 2026-07-23 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcdde3lvc2m...

CVE-2026-63760

creationtimestamp| type| source ---|---|--- 2026-07-20 13:34:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3furnap72q 2026-07-23 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrc7y2osfl22...