CVE-2026-69118

CVE-2026-69118 affects Cachet up to version 2.4.1. The vulnerability is a server-side template injection in incident template rendering that allows authenticated users to execute arbitrary PHP code, enabling remote code execution as the web server process. Attackers can craft malicious incident t...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-19369

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...

CVE-2026-16955

creationtimestamp| type| source ---|---|--- 2026-08-08 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117058713911525712 2026-08-08 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskkg4ykio2a 2026-08-08 08:50:01+00:00| seen|...

CVE-2026-14205

creationtimestamp| type| source ---|---|--- 2026-08-07 19:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb2carvt2y 2026-08-08 16:02:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgweks342h...

CVE-2026-71438

creationtimestamp| type| source ---|---|--- 2026-08-06 20:32:06+00:00| seen| https://gist.github.com/alon710/1523a448808a9bd39531599fad70a2e8...

Malicious code in @voxepay/checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce33339fdc1c4c994f6062588e4f4278ee9074ddb04759504100e89084f4a96 No suspicious behaviors were identified in this package version. There are no install-time lifecycle scripts performing remote fetches, no hardcoded...

CVE-2026-64306

creationtimestamp| type| source ---|---|--- 2026-08-06 04:48:42+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-18991

creationtimestamp| type| source ---|---|--- 2026-08-06 04:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f4wuerlimpf34...

CVE-2026-18990

creationtimestamp| type| source ---|---|--- 2026-08-06 04:27:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/geeega7yl6k7m...

CVE-2026-65602

creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-05 22:35:09+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv 2026-08-06 00:00:18+00:00...

CVE-2026-71191

creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...

CVE-2026-71262

creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:19+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrztziyz2m...

CVE-2026-71289

creationtimestamp| type| source ---|---|--- 2026-08-05 13:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117043142705707824 2026-08-05 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msdn56d7is2i 2026-08-05 15:02:18+00:00| seen|...

CVE-2026-70588

creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...

CVE-2026-5062

creationtimestamp| type| source ---|---|--- 2026-08-05 06:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp 2026-08-06 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23...

CVE-2020-1215

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/907 2026-08-06 00:00:54+00:00| seen| https://t.me/timcorehacking/907...

CVE-2026-18897

creationtimestamp| type| source ---|---|--- 2026-08-05 02:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hs53hje7zja5s 2026-08-05 06:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msctz2eaua2z 2026-08-05 06:00:47+00:00| seen|...

GHSA-XM43-3M56-W3WF

creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...

Malicious code in @umacloud/cli-win32-x64 (npm)

npm/@umacloud/cli-win32-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...