CVE-2026-12375

creationtimestamp| type| source ---|---|--- 2026-07-07 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq2klmfzen2c 2026-07-07 12:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116878581993306054 2026-07-07 14:12:05+00:00| seen|...

MAL-2026-8417 Malicious code in pd130985cmcb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8252 Malicious code in oaijgitfzlsik (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8168 Malicious code in oaidx1466937 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8086 Malicious code in meet8402a (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-11340

creationtimestamp| type| source ---|---|--- 2026-07-07 11:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2keavs5r2n...

MAL-2026-7977 Malicious code in lcalx1168268 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7789 Malicious code in lambehgnew1593 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chmid8000x584612 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1915 Sentry vulnerable to incorrect credential validation on OAuth token requests

Impact An attacker with sufficient client-side exploits could retrieve a valid access token for another user during the OAuth token exchange due to incorrect credential validation. The client ID must be known and the API application must have already been authorized on the targeted user account...

MINI-8966-W5H8-VXCJ

Bulletin has no description...

CVE-2026-7380

creationtimestamp| type| source ---|---|--- 2026-07-07 08:09:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25ovshbb23...

CVE-2026-5799

creationtimestamp| type| source ---|---|--- 2026-07-07 07:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq24xxd3v22a...

CVE-2026-9710

creationtimestamp| type| source ---|---|--- 2026-07-07 06:16:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpzxdpv5zk2m...

CVE-2026-57869

Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3...

CVE-2026-42145

creationtimestamp| type| source ---|---|--- 2026-07-07 04:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsd4btb62y...

CVE-2026-34047

creationtimestamp| type| source ---|---|--- 2026-07-07 04:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqankglc2a 2026-07-07 05:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpztcxqgo42h...

CVE-2026-42147

creationtimestamp| type| source ---|---|--- 2026-07-07 04:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpqm2sbu2y...

CVE-2026-34168

creationtimestamp| type| source ---|---|--- 2026-07-07 03:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpearmqu23 2026-07-07 07:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzzucuahv2y...

CVE-2026-34044 Coolify: Cross-team IDOR in logs component (resource lookup not team-scoped)

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, the Logs::mount component looks up resources by UUID without scoping the lookup to the current team, allowing an authenticated user to access logs for applications owned by...