ECHO-E5BF-6322-947E

Bulletin has no description...

ECHO-CE87-C209-0BD7

Bulletin has no description...

PT-2026-57403

Name of the Vulnerable Software and Affected Versions SureCart versions prior to 4.2.4 Description An issue exists that allows privilege escalation via account takeover. The software fails to properly validate a user's identity when updating details, such as the email address, during customer...

CVE-2026-14286

creationtimestamp| type| source ---|---|--- 2026-07-10 23:52:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqddr3y7pj2i...

CVE-2026-55783

creationtimestamp| type| source ---|---|--- 2026-07-10 23:41:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd5ebveh2d...

GHSA-H4G2-XFMW-Q2C9

creationtimestamp| type| source ---|---|--- 2026-07-10 23:12:24+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745 2026-07-11 00:01:00+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745...

CVE-2026-15377

creationtimestamp| type| source ---|---|--- 2026-07-10 22:55:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdalv4kgn2y 2026-07-11 00:17:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf6d2id22c...

CVE-2026-1667

creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdacfneqy2i 2026-07-11 00:14:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdezilp4u2y 2026-07-11 00:54:12+00:00| seen|...

CVE-2026-54163

creationtimestamp| type| source ---|---|--- 2026-07-10 22:35:03+00:00| published-proof-of-concept| https://github.com/github/secureheaders/security/advisories/GHSA-rqq5-2gf9-4w4q 2026-07-18 00:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquxwpunrt2e...

CVE-2026-44383

CVE-2026-44383 concerns Hydro-Québec Le Circuit Electrique charging station backend with insufficient session expiration. The issue allows multiple connections using the same charging station ID, enabling attackers to deploy multiple OCPP clients to overwhelm the backend, impacting availability (...

CVE-2026-44383 Hydro-Québec Le Circuit Electrique charging station backend Insufficient Session Expiration

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend...

CVE-2026-58588 Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting XSS. This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1...

CVE-2026-56335

creationtimestamp| type| source ---|---|--- 2026-07-10 21:23:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3gbkepx2y...

CVE-2026-58499 Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message senderid field was not validated as a path-safe identifier, unlike appid and projectid. During user-memory extraction, senderid i...

EUVD-2026-43038

EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message senderid field was not validated as a path-safe identifier, unlike appid and projectid. During user-memory extraction, senderid i...

CVE-2026-58499 Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message senderid field was not validated as a path-safe identifier, unlike appid and projectid. During user-memory extraction, senderid i...

CVE-2026-59882

A flaw was found in guzzlehttp/psr7, a PHP library for HTTP messages. The Uri::assertValidHost function fails to properly validate URI host components, allowing for the inclusion of authority delimiters, embedded ports, or malformed IPv6 brackets. This improper validation can lead to discrepancie...

CVE-2026-55478

creationtimestamp| type| source ---|---|--- 2026-07-10 20:24:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcy666gy22k 2026-07-11 01:10:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi5jpwji2s...

GHSA-7835-87Q9-RGVV

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:54+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mqcxbpjci62k 2026-09-14 14:07:33+00:00| seen| https://bsky.app/profile/bokonon.ai/post/3mvibucyh6a2t...

CVE-2026-55843

creationtimestamp| type| source ---|---|--- 2026-07-10 20:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcx6o6zfz2g 2026-07-11 01:01:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhmz3k6w2f 2026-08-29 01:28:38+00:00| seen|...