49437 matches found
CVE-2026-48097
creationtimestamp| type| source ---|---|--- 2026-08-08 07:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirptsnh23...
CVE-2026-14207
creationtimestamp| type| source ---|---|--- 2026-08-08 05:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskcvzesxg25...
CVE-2015-6609
creationtimestamp| type| source ---|---|--- 2026-08-08 04:30:05+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3mskadlvn4c2c 2026-08-08 15:03:18+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3msldpwlkik2w 2026-08-09 03:19:22+00:00| seen|...
GHSA-V2XH-2VP8-57H8
creationtimestamp| type| source ---|---|--- 2026-08-08 04:05:29+00:00| seen| https://bsky.app/profile/agentwyre.ai/post/3msk6xoj6ep26...
GHSA-94G3-G5V7-Q4JG
creationtimestamp| type| source ---|---|--- 2026-08-08 03:53:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3msk6crnt3x2y...
CVE-2026-50540
creationtimestamp| type| source ---|---|--- 2026-08-07 21:16:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjhxzxuly2n 2026-08-23 19:14:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/27lennt4z7xbp...
CVE-2026-11430
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so an unauthenticated remote attacker who can reach POST...
CVE-2026-66707
creationtimestamp| type| source ---|---|--- 2026-08-07 19:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msjbdfv2p622...
CVE-2026-64637
creationtimestamp| type| source ---|---|--- 2026-08-07 19:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb5ttr6x2b 2026-08-08 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskff7qcqj2p 2026-08-08 06:02:35+00:00| seen|...
CVE-2026-15733
creationtimestamp| type| source ---|---|--- 2026-08-07 19:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjat4z4mf2d 2026-08-09 04:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpvwtkoa2q 2026-08-13 09:00:08+00:00| confirmed|...
CVE-2026-11430 Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so an unauthenticated remote attacker who can reach POST...
CVE-2026-11430 Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so an unauthenticated remote attacker who can reach POST...
CVE-2026-47363
creationtimestamp| type| source ---|---|--- 2026-08-07 18:50:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dhdonwauwwnmr...
CVE-2026-20338
creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-10 10:00:46+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:06+00:00| seen|...
CVE-2026-66711
creationtimestamp| type| source ---|---|--- 2026-08-07 17:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msj2mshy3p2w...
CVE-2026-48093
The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...
CVE-2026-67689
creationtimestamp| type| source ---|---|--- 2026-08-07 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msivy7oiw62u...
CVE-2026-17626
creationtimestamp| type| source ---|---|--- 2026-08-07 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msimra6igd2r...
MAL-2026-13549 Malicious code in dojo-rn-interview (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dcf2c659fc0c8b63b90671ae2a865a7811d5eeaaf321aab8355358117be47d [email protected] declares a preinstall script that runs index.js on npm install. The script collects host identifiers via os.hostname,...