CVE-2026-55691

creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...

CVE-2026-55446

creationtimestamp| type| source ---|---|--- 2026-06-19 13:09:48+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9...

CVE-2026-55770

creationtimestamp| type| source ---|---|--- 2026-06-19 11:28:09+00:00| published-proof-of-concept| https://github.com/openbao/openbao/security/advisories/GHSA-6mwx-4547-5vc9...

CVE-2026-55195

creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:20+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-gjrg-mpp7-g774 2026-07-08 22:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66cvk66i27...

CVE-2026-55206

creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:10+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-h4gh-22qq-72r7 2026-07-08 22:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66rc3cyn2i...

CVE-2026-23879

creationtimestamp| type| source ---|---|--- 2026-06-19 09:31:59+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7 2026-06-24 22:16:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d 2026-06-24 23:14:35+00:00|...

GHSA-MPC8-JXJH-QPGH

creationtimestamp| type| source ---|---|--- 2026-06-19 07:11:14+00:00| seen| https://gist.github.com/alon710/333afcd685b49ef354fee03c7b82b7fd...

GHSA-WC84-J36W-PW4X

creationtimestamp| type| source ---|---|--- 2026-06-19 05:42:26+00:00| seen| https://gist.github.com/alon710/b863239f1325d87e011dc1044f290c3c...

MAL-2026-6194 Malicious code in portloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e745a79c5fb952105d93cc5d5f37bc77af9cc08d9a021f09a12d26416a29de3c On default invocation e.g., npx portloop with no flags, the CLI runs in daemon+quiet+respawn mode and POSTs id, hostname, host, url, port, user to a...

GHSA-G7M4-839X-CH6V

creationtimestamp| type| source ---|---|--- 2026-06-19 03:11:39+00:00| seen| https://gist.github.com/alon710/9444ec80b5b6b03e92361b8cc9ab95ef...

CVE-2026-25119

creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:56+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-w6j9-vw59-27wv...

CVE-2026-52807

creationtimestamp| type| source ---|---|--- 2026-06-19 02:19:30+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-vcm5-gvmp-78mp...

CVE-2026-52811

creationtimestamp| type| source ---|---|--- 2026-06-19 02:18:08+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-89mr-xqfv-758m 2026-06-24 22:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yysdqds2t...

CVE-2026-52812

creationtimestamp| type| source ---|---|--- 2026-06-19 02:17:49+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-6p9m-q3jp-47h4 2026-06-24 22:38:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2y72dynn2f...

CVE-2026-52813

creationtimestamp| type| source ---|---|--- 2026-06-19 02:17:38+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-c39w-43gm-34h5 2026-06-24 23:03:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2zkpdboz2l 2026-06-30 17:00:16+00:00|...

CVE-2026-50519: Initialization of a Resource with an Insecure Default

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-12726: Server-Side Request Forgery (SSRF)

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

A Longitudinal Study of Android Apps Signing Key Protection

Android app signing relies on developer-managed credentials, making secure key protection essential for the integrity of the software supply chain. A recent platform key leakage incident involving two major OEM manufacturers demonstrates that even robustly designed signing mechanisms can be...

PT-2026-51035

Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description An insecure default during the initialization of a resource allows an unauthorized attacker to disclose information over a network...

PT-2026-51010

Name of the Vulnerable Software and Affected Versions AWX affected versions not specified Description A flaw exists in the GitHub webhook integration where the controller stores the pull request.statuses url value from a pull request webhook payload without validating if it points to a trusted...