CVE-2026-27302

creationtimestamp| type| source ---|---|--- 2026-08-11 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstf5jgqok2v...

MINI-H74C-2MVR-497R

Bulletin has no description...

MINI-M3Q2-242R-QC68

Bulletin has no description...

CVE-2026-58231

creationtimestamp| type| source ---|---|--- 2026-08-11 10:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mssgucru7h2q 2026-08-11 12:29:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hypoe6tn3afnc 2026-08-11 12:43:23+00:00| seen|...

CVE-2026-73161

creationtimestamp| type| source ---|---|--- 2026-08-11 10:44:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/56vuf5nggohcn...

CVE-2026-72886

creationtimestamp| type| source ---|---|--- 2026-08-10 20:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqwzpb62x2g 2026-08-10 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqymyf7po2t...

CVE-2026-72736

creationtimestamp| type| source ---|---|--- 2026-08-10 18:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqoy6kzx22b...

CGA-W8WR-74CW-W46C

Bulletin has no description...

CGA-6R2X-67QX-CRJ7

Bulletin has no description...

CVE-2026-19334

A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product ...

EUVD-2026-54871

A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product ...

CVE-2026-19323

CVE-2026-19323 affects the generateProjectDocs function in src/index.ts of the analyze-projec component of the azer react-analyzer-mcp. The vulnerability arises from manipulation of the projectName argument, which can lead to path traversal. Exploitation is described as requiring local access. Th...

CVE-2026-19285

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation...

CVE-2026-19268 abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

MAL-2026-13449 Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...

MAL-2026-12730 Malicious code in devplatform-nx-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d308883ce62856714651ea10d0051677eaa943f29b41c5cf94dd1614ba08d724 On require of the package, index.js loads compat.js which runs setup and downloads a platform-specific binary from Cloudflare Workers hosts whose nam...

CVE-2026-18903

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to...

CVE-2026-18770

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...

CVE-2026-18766

A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...

CVE-2026-18766

CVE-2026-18766 affects the chetans9 core-php-admin-panel (up to the commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f). The issue is a SQL injection caused by manipulation of the argument filter_col in customers.php. It can be exploited remotely, and the exploit has been published and may be used. ...