CVE-2026-16536: Server-Side Request Forgery (SSRF)

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...

RockyLinux 8 : kernel-rt (RLSA-2026:49213)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49213 advisory. kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master conntrack...

CVE-2026-67856

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItemsSampling, Publish, TransferSubscriptions, and DeleteSubscriptions requests...

JLSEC-2026-1154

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to ordinary client connections but not consistently to messages arriving through leafnode connections, allowing a leafnode...

CVE-2026-18589

creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2fnayl2p 2026-08-03 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030402699172268 2026-08-03 07:30:32+00:00| seen|...

Exploit for External Control of Assumed-Immutable Web Parameter in Google Chrome

--- 10. CVE-2026-9998 – Insecure Deserialization in Blockcha...

CVE-2026-10848

creationtimestamp| type| source ---|---|--- 2026-08-02 18:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4nlsi2o42p 2026-08-02 19:07:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4olaqzdj2e...

Exploit for CVE-2026-58424

CVE-2026-58424 - Gitea Fork PR Workflow Approval Gate Bypass...

CVE-2026-67332

creationtimestamp| type| source ---|---|--- 2026-08-01 22:33:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jmj437s22 2026-08-01 22:33:46+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jmyhpza25 2026-08-01 23:09:05+00:00| seen|...

CVE-2026-17605

creationtimestamp| type| source ---|---|--- 2026-08-01 18:09:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22unslmq25 2026-08-01 18:09:45+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms22uvg7hd2m 2026-08-01 18:56:31+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2026-13725

creationtimestamp| type| source ---|---|--- 2026-08-01 15:30:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrytq4ov24 2026-08-01 15:31:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzrz752bw2g...

CVE-2026-15244

creationtimestamp| type| source ---|---|--- 2026-08-01 14:55:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq2437k52v 2026-08-01 14:56:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzq2ydcbl2j 2026-08-01 15:29:04+00:00| seen|...

CVE-2026-13596

creationtimestamp| type| source ---|---|--- 2026-08-01 14:51:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpslqvwa22 2026-08-01 14:51:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpslxgmm2x 2026-08-01 14:51:38+00:00| seen|...

CVE-2026-14197

creationtimestamp| type| source ---|---|--- 2026-08-01 14:48:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpnsfhow2l 2026-08-01 15:04:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqjdnouq2p 2026-08-01 15:04:40+00:00| seen|...

CVE-2026-14839

creationtimestamp| type| source ---|---|--- 2026-08-01 14:47:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzplqscwp24 2026-08-01 14:47:58+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpm3kkkt22 2026-08-01 15:05:46+00:00| seen|...

CVE-2026-14292

creationtimestamp| type| source ---|---|--- 2026-08-01 14:42:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpbtsapf2b 2026-08-01 14:42:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzpcgogvh2r 2026-08-01 15:10:33+00:00| seen|...

CVE-2026-14836

creationtimestamp| type| source ---|---|--- 2026-08-01 14:37:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzozq2ju72l 2026-08-01 14:38:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzp2lttty2v 2026-08-01 15:21:45+00:00| seen|...

CVE-2026-13158

creationtimestamp| type| source ---|---|--- 2026-08-01 14:00:04+00:00| seen| https://t.me/GithubRedTeam/96151 2026-08-01 14:53:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzpwamqyx2r 2026-08-01 14:53:39+00:00| seen|...

Wallet event parsers accept unauthenticated events

The NIP-47 response and notification parsers and the NIP-60 wallet event parsers decrypted relay-provided events before verifying their kind, computed event ID, signature, and expected wallet public key. The decryption peer was derived from the untrusted event author, so successful decryption did...