CVE-2026-64665

creationtimestamp| type| source ---|---|--- 2026-08-10 01:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msovko4fac2t...

PT-2026-69999

Name of the Vulnerable Software and Affected Versions Zephyr versions 3.5.0 and later Description An out-of-bounds write exists in the tls opt dtls peer connection id value get function within subsys/net/lib/sockets/sockets tls.c. This function handles the getsockoptSOL TLS, TLS DTLS PEER CID VAL...

PT-2026-69328

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description A SQL injection flaw exists that allows remote attackers to manipulate the ID argument. This issue occurs within an unknown function in the '/admin/ajax.php?action=set...

CVE-2026-19370

creationtimestamp| type| source ---|---|--- 2026-08-09 22:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jea32iuljgabn...

CVE-2026-19368

creationtimestamp| type| source ---|---|--- 2026-08-09 22:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idhvgetbit6xd...

MINI-2J2G-MJ8V-84X5

Bulletin has no description...

CVE-2026-42850

creationtimestamp| type| source ---|---|--- 2026-08-09 18:21:53+00:00| seen| https://vulnerability.circl.lu/bundle/d517fb59-dc35-45a9-8c20-83397659735e...

CVE-2026-15153

creationtimestamp| type| source ---|---|--- 2026-08-09 14:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnrkhs5la26...

MINI-RQ38-PHV8-J899

Bulletin has no description...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-19327

CVE-2026-19327 affects the package abracadabra50 claude-sesh 1.0.0. The flaw is in the function getEnrichedData/enrichSession within src/services/enricher.ts, where manipulating the argument sessionId can trigger path traversal. The issue is operable locally, with CVSS-based assessments indicatin...

CVE-2026-19327 abracadabra50 claude-sesh enricher.ts enrichSession path traversal

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

ECHO-1B5A-EE63-2C52

Bulletin has no description...

CVE-2026-15257

creationtimestamp| type| source ---|---|--- 2026-08-08 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslv7c4uaq2i 2026-08-09 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnyb3cao62a...

GHSA-WPQR-6V78-JR5G

creationtimestamp| type| source ---|---|--- 2026-08-08 11:48:00+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585...

CVE-2026-19279 MIMICLab mcp-pdf-vision index.ts load_pdf command injection

A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function loadpdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was inform...

GHSA-7C4V-FWGW-9RF7

creationtimestamp| type| source ---|---|--- 2026-08-08 09:31:21+00:00| seen| https://gist.github.com/alon710/9318966a289b67d09be3b424c52f31ab...

CVE-2026-19270 Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...

CVE-2026-19270

Hulupeep mcp-ui-probe up to 0.2.0 contains a local path-traversal vulnerability in Journey/Usage’s JourneyStorage.ts. The affected functions—get_journey, delete_journey, analyze_journey, and usage_stats—manipulate journeyId/filename to access unintended paths. The issue requires local access; no ...

EUVD-2026-54769

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...