CVE-2026-12761

creationtimestamp| type| source ---|---|--- 2026-07-10 23:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqdbtyyx3625 2026-07-11 00:00:37+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqde7tbdel22 2026-07-11 14:00:30+00:00| seen|...

CVE-2026-57167

creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbe3sakx2d 2026-07-11 00:18:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfa5vvni2z...

CVE-2026-1667

creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdacfneqy2i 2026-07-11 00:14:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdezilp4u2y 2026-07-11 00:54:12+00:00| seen|...

CVE-2026-15373

creationtimestamp| type| source ---|---|--- 2026-07-10 22:21:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6penuac2e 2026-07-11 00:12:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdevow4gb2i 2026-07-11 00:45:40+00:00| seen|...

CVE-2026-8609

creationtimestamp| type| source ---|---|--- 2026-07-10 22:20:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6nqxkrk2x 2026-07-11 00:17:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf5lhe6f2e...

GHSA-G936-7JQJ-MWV8

creationtimestamp| type| source ---|---|--- 2026-07-10 22:12:05+00:00| seen| https://gist.github.com/alon710/3aab1c4181e03ef1803e74b755304657...

CVE-2024-52053

creationtimestamp| type| source ---|---|--- 2026-07-10 22:07:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqd5v34qjr25...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the API location creation process when both Full Multiple Companies Support and scopelocationsfmcs are enabled. An attacker can create a child...

CVE-2026-6872

creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxpfnoro2x...

CVE-2026-53449

creationtimestamp| type| source ---|---|--- 2026-07-10 20:14:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxlbbnuh2i 2026-07-11 01:02:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhnsjwyw2w 2026-07-14 04:51:38+00:00| seen|...

CVE-2026-55472

creationtimestamp| type| source ---|---|--- 2026-07-10 20:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxdteayy2z 2026-07-11 01:02:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhp6pnjy2y 2026-07-14 04:11:02+00:00| seen|...

GHSA-7835-87Q9-RGVV

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:54+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mqcxbpjci62k...

CVE-2026-55460

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxahqevc2l 2026-07-11 01:12:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdiailwdp2y 2026-08-28 18:35:08+00:00| published-proof-of-concept|...

GHSA-W7CG-WHH7-XP28

creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66...

CVE-2026-54070

creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66 2026-07-10 20:35:11+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w7cg-whh7-xp28...

GHSA-XQP3-JQ6G-X3QM File Browser: Authentication Bypass via Proxy Auth Header Forgery

Summary When FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server directly can impersonate any user - including admin - by sending a single forged HTTP header. No credentials are required. Additionally, specifying a...

File Browser: Authentication Bypass via Proxy Auth Header Forgery

Summary When FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server directly can impersonate any user - including admin - by sending a single forged HTTP header. No credentials are required. Additionally, specifying a...

EUVD-2026-39508

File Browser: Authentication Bypass via Proxy Auth Header Forgery...

CVE-2026-55472

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

CVE-2025-30007

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can exploit insufficient input validation in...