CVE-2026-18589

creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2fnayl2p 2026-08-03 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030402699172268 2026-08-03 07:30:32+00:00| seen|...

CVE-2026-10848

creationtimestamp| type| source ---|---|--- 2026-08-02 18:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4nlsi2o42p 2026-08-02 19:07:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4olaqzdj2e...

CVE-2026-67332

creationtimestamp| type| source ---|---|--- 2026-08-01 22:33:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jmj437s22 2026-08-01 22:33:46+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jmyhpza25 2026-08-01 23:09:05+00:00| seen|...

CVE-2026-17605

creationtimestamp| type| source ---|---|--- 2026-08-01 18:09:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22unslmq25 2026-08-01 18:09:45+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms22uvg7hd2m 2026-08-01 18:56:31+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2026-13725

creationtimestamp| type| source ---|---|--- 2026-08-01 15:30:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrytq4ov24 2026-08-01 15:31:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzrz752bw2g...

CVE-2026-15244

creationtimestamp| type| source ---|---|--- 2026-08-01 14:55:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq2437k52v 2026-08-01 14:56:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzq2ydcbl2j 2026-08-01 15:29:04+00:00| seen|...

CVE-2026-13596

creationtimestamp| type| source ---|---|--- 2026-08-01 14:51:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpslqvwa22 2026-08-01 14:51:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpslxgmm2x 2026-08-01 14:51:38+00:00| seen|...

CVE-2026-14197

creationtimestamp| type| source ---|---|--- 2026-08-01 14:48:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpnsfhow2l 2026-08-01 15:04:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqjdnouq2p 2026-08-01 15:04:40+00:00| seen|...

CVE-2026-14839

creationtimestamp| type| source ---|---|--- 2026-08-01 14:47:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzplqscwp24 2026-08-01 14:47:58+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpm3kkkt22 2026-08-01 15:05:46+00:00| seen|...

CVE-2026-14292

creationtimestamp| type| source ---|---|--- 2026-08-01 14:42:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpbtsapf2b 2026-08-01 14:42:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzpcgogvh2r 2026-08-01 15:10:33+00:00| seen|...

CVE-2026-14836

creationtimestamp| type| source ---|---|--- 2026-08-01 14:37:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzozq2ju72l 2026-08-01 14:38:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzp2lttty2v 2026-08-01 15:21:45+00:00| seen|...

CVE-2026-13158

creationtimestamp| type| source ---|---|--- 2026-08-01 14:00:04+00:00| seen| https://t.me/GithubRedTeam/96151 2026-08-01 14:53:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzpwamqyx2r 2026-08-01 14:53:39+00:00| seen|...

Wallet event parsers accept unauthenticated events

The NIP-47 response and notification parsers and the NIP-60 wallet event parsers decrypted relay-provided events before verifying their kind, computed event ID, signature, and expected wallet public key. The decryption peer was derived from the untrusted event author, so successful decryption did...

NIP-98 authorization parsing permits resource exhaustion

The NIP-98 HTTP authorization parser Base64-decoded the complete authorization value and parsed the resulting JSON event without applying an application-level size limit. Both operations occurred before the event's signature and authorization fields could be validated. An unauthenticated remote...

CVE-2026-15018 Database Collation Fix <= 1.2.10 - Unauthenticated SQL Injection via 'force-collation-algorithm' Parameter

The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

EUVD-2026-51710

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not...

CVE-2026-14315

The Pixel Tag Manager for WooCommerce WordPress plugin is vulnerable in versions before 2.2.1 due to missing authorization on one AJAX action. This allows unauthenticated users to submit forged e-commerce conversion events to the site’s configured server‑side advertising conversion APIs using sto...

CVE-2026-14315

The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit forged e-commerce conversion events to the site's configured server-side advertising conversion APIs using the site's...

CVE-2026-14823

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not...