PT-2026-66608

Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn is an AI-powered C2 and red-team operations framework. The lazyc2.py component registers an unauthenticated Socket.IO input event handler that dispatches the value...

PT-2026-66407

A flaw in Node.js Permission Model enforcement allows trace events.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...

CVE-2026-6267

creationtimestamp| type| source ---|---|--- 2026-07-29 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssq4z4eg24 2026-07-29 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssz3rn6z23 2026-07-30 03:11:06+00:00| seen|...

CVE-2026-67429

creationtimestamp| type| source ---|---|--- 2026-07-29 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsp3jcbsn23 2026-07-29 20:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsporaviy2l 2026-07-30 16:35:15+00:00|...

CVE-2026-54680

creationtimestamp| type| source ---|---|--- 2026-07-29 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsi5rwobd22 2026-07-29 18:35:06+00:00| published-proof-of-concept| https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h 2026-07-29...

CVE-2023-22490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:51+00:00| seen| https://t.me/CVEhub/6812 2026-07-29 12:03:19+00:00| seen| https://t.me/sysadminup/1543 2026-07-30 00:01:27+00:00| seen| https://t.me/CVEhub/6812 2026-07-30 00:03:05+00:00| seen| https://t.me/sysadminup/1543 2026-07-31...

CVE-2026-18191

creationtimestamp| type| source ---|---|--- 2026-07-29 08:45:02+00:00| seen| https://www.twcert.org.tw/en/cp-139-11049-db9ae-2.html 2026-07-29 09:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrl7kbimf2u...

CVE-2026-64556

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

EUVD-2026-50201

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

CVE-2026-64556

CVE-2026-64556 pertains to the Linux kernel PMU subsystem (perf/core). When a performance event group leader is removed during process exit, its surviving siblings can remain active and still linked to the removed leader’s list, leaving the PMU context active list in a potentially inconsistent st...

CVE-2026-12144

creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...

CVE-2026-57510 SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs...

CVE-2026-62431

creationtimestamp| type| source ---|---|--- 2026-07-28 14:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnys3koc2s 2026-07-28 15:43:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqtfc6lg2u 2026-07-29 13:55:22+00:00| seen|...

CVE-2026-59557

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59557

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59557

CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions

EUVD-2026-49224

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59557 WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CERTFR-2026-ACT-032

creationtimestamp| type| source ---|---|--- 2026-07-27 12:44:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mrmwf2trmd27 2026-07-27 12:44:48+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116992001998966808 2026-07-27 13:36:16+00:00| seen|...

CVE-2026-13390

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...