CVE-2020-5777

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7444 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7444 2026-07-14 00:00:51+00:00| seen| https://t.me/pleyadesit/7444...

CVE-2020-24436

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:16+00:00| seen| https://t.me/pleyadesit/7890 2026-07-13 00:00:40+00:00| seen| https://t.me/pleyadesit/7890 2026-07-14 00:00:51+00:00| seen| https://t.me/pleyadesit/7890...

GHSA-R389-865G-HCG3

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:09+00:00| seen| https://t.me/securixykz/1030 2026-07-13 00:00:34+00:00| seen| https://t.me/securixykz/1030 2026-07-14 00:01:00+00:00| seen| https://t.me/securixykz/1030...

GHSA-RR6P-3PFG-562J

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:07+00:00| seen| https://t.me/securixykz/1121 2026-07-13 00:00:18+00:00| seen| https://t.me/securixykz/1121 2026-07-14 00:01:01+00:00| published-proof-of-concept| https://t.me/securixykz/1121...

CVE-2026-10668

The Nuvoton NuMaker HSUSBD USB device-controller driver drivers/usb/udc/udcnumaker.c armed the control Data IN stage unconditionally base-CEPTXCNT = len in numakerhsusbdeptrigger. Because the HSUSBD hardware cannot disarm a control Data IN already armed for a previous transfer, a USB host that...

CVE-2026-15491

creationtimestamp| type| source ---|---|--- 2026-07-12 10:52:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgz54lmy52e 2026-07-12 12:01:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqh4xlxwyb2v...

CVE-2026-15488

creationtimestamp| type| source ---|---|--- 2026-07-12 09:29:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqguiimld32z 2026-07-12 11:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3nxhwag2t...

CVE-2026-61428

PraisonAI AgentMail is affected by CVE-2026-61428 in versions before 4.6.78, where webhook messages lack signature verification. This enables unauthenticated attackers to POST crafted message.received events to the webhook endpoint, injecting arbitrary content into the agent and triggering replie...

CVE-2026-15338

creationtimestamp| type| source ---|---|--- 2026-07-11 04:42:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtxhnb7y2y 2026-07-11 05:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyrtsfv2k 2026-07-13 00:00:20+00:00| seen|...

CVE-2026-7620 Notification for Telegram <= 3.5.1 - Missing Authorization to Authenticated (Subscriber+) Cron Modification via nftb_cron_action_set AJAX Action

The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-57403

Name of the Vulnerable Software and Affected Versions SureCart versions prior to 4.2.4 Description An issue exists that allows privilege escalation via account takeover. The software fails to properly validate a user's identity when updating details, such as the email address, during customer...

GHSA-56MP-4F3V-FGJ2

creationtimestamp| type| source ---|---|--- 2026-07-10 23:42:38+00:00| seen| https://gist.github.com/alon710/215bfec609456ef9029abde8936c9791 2026-07-11 00:01:00+00:00| seen| https://gist.github.com/alon710/215bfec609456ef9029abde8936c9791...

CVE-2026-55638

creationtimestamp| type| source ---|---|--- 2026-07-10 22:49:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdaa2jkj22a 2026-07-10 23:39:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdczk2d552e 2026-07-11 19:00:45+00:00| seen|...

CVE-2026-54000

creationtimestamp| type| source ---|---|--- 2026-07-10 22:30:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd767pejc2x 2026-07-10 23:32:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcnj33hu22...

CVE-2026-55879

OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a public project key, stores them in ClickHouse without output encoding, and later renders them in the authenticated...

CVE-2026-6802

creationtimestamp| type| source ---|---|--- 2026-07-10 12:11:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4ms6itr2e 2026-07-10 12:37:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc622tdxu25 2026-07-10 14:21:01+00:00| seen|...

Oracle Linux 7 : tigervnc (ELSA-2026-22456)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22456 advisory. - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 and CVE-2026-34352 Orabug: 39478221 - Fix CVE-2025-62229:...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: multus-cni, tetragon, task, kuberay-operator, kubernetes-dashboard, opentofu, addon-resizer, harbor-registry, yunikorn-k8shim, newrelic-infrastructure-agent, cluster-autoscaler, envoy-ratelimit, cluster-proportional-autoscaler, crossplane-provider-aws-route53,...

EUVD-2026-42683

Mockoon provides way to design and run mock APIs. Prior to 9.7.0, Mockoon's admin API in commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as user-defined mock routes, enabled by default in shipped runtimes, serves Access-Control-Allow-Origin: with write methods...

CVE-2026-59216

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...