GHSA-7C78-JF6Q-G5CM

creationtimestamp| type| source ---|---|--- 2026-06-15 17:11:14+00:00| seen| https://gist.github.com/alon710/0bdb094f8b35593b7efeef728ecec669...

GHSA-692R-GRFM-V8X7 @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

An issue in the @angular/core package allows bypassing script-execution restrictions during dynamic component creation. Specifically, the dynamic component instantiation mechanism createComponent failed to reject mounting components directly onto a or namespaced script element such as . This...

CVE-2016-20084

creationtimestamp| type| source ---|---|--- 2026-06-15 16:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modq3ufon32h...

EUVD-2026-36265

tmp: Type-confusion bypass of assertPath allows path traversal via non-string prefix/postfix/template...

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

Summary The assertPath guard added to [email protected] rejects only string values that contain the substring ... It is bypassed when prefix, postfix, or template is supplied as a non-string value Array, Buffer, or any object whose includes'..' returns falsy but whose stringification still contains ../...

CVE-2026-49062

creationtimestamp| type| source ---|---|--- 2026-06-15 16:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modpjxklhs2m 2026-06-15 18:03:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3modulra6do2i...

CVE-2016-20079

creationtimestamp| type| source ---|---|--- 2026-06-15 16:23:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modozdldff2z...

CVE-2016-20083

creationtimestamp| type| source ---|---|--- 2026-06-15 16:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnvw3mdy2v...

CVE-2026-49064

creationtimestamp| type| source ---|---|--- 2026-06-15 15:57:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnls2hnp2a 2026-06-15 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moe36a2mb42i...

CVE-2026-9595

creationtimestamp| type| source ---|---|--- 2026-06-15 14:51:06+00:00| seen| https://bsky.app/profile/bjohansebas.me/post/3modjudajts2z 2026-06-15 15:06:59+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3modkqrbuns27 2026-06-17 18:51:46+00:00| seen|...

CVE-2026-49077

creationtimestamp| type| source ---|---|--- 2026-06-15 14:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modhvwkzrg26...

CVE-2026-49770

creationtimestamp| type| source ---|---|--- 2026-06-15 13:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modeknoxnr2b 2026-06-15 21:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moea74g52u2m 2026-06-16 01:01:01+00:00| seen|...

GHSA-CHGR-C6PX-7XPP

creationtimestamp| type| source ---|---|--- 2026-06-15 11:41:32+00:00| seen| https://gist.github.com/alon710/7781242dd6423ae75e05b31377b89606...

CVE-2026-34030 Improper branch-code validation in Wertheim SafeController Software allows file path manipulation

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in multiple application functions, including filesystem path generation for uploaded files, profile pictures, and...

CVE-2026-12043

creationtimestamp| type| source ---|---|--- 2026-06-15 09:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mocwsccpbm2r...

CVE-2026-12213

creationtimestamp| type| source ---|---|--- 2026-06-15 08:24:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocubqfkzj2a...

CVE-2026-12219

creationtimestamp| type| source ---|---|--- 2026-06-15 08:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctpsxxop2b...

CVE-2026-49113

creationtimestamp| type| source ---|---|--- 2026-06-15 07:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocqgz2rtq2p 2026-06-17 00:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh2yktud42v...

EUVD-2026-36699

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...

CVE-2026-8935 Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...