CVE-2026-18615

creationtimestamp| type| source ---|---|--- 2026-08-03 18:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms76fkoadk22...

CVE-2026-69153

creationtimestamp| type| source ---|---|--- 2026-08-03 18:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gp5oyt6frvyqh 2026-08-03 18:31:17+00:00| seen| https://gist.github.com/alon710/cea21195fa5b2fd7a130b5ccd15ff053 2026-08-03 18:35:03+00:00| published-proof-of-concept|...

CVE-2026-15930

creationtimestamp| type| source ---|---|--- 2026-08-03 17:54:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72wqlg2t2h...

CVE-2026-16534

creationtimestamp| type| source ---|---|--- 2026-08-03 17:52:19+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72t5qgvk2l...

CVE-2026-16532

creationtimestamp| type| source ---|---|--- 2026-08-03 17:52:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72t4dfzy23...

CVE-2026-41453

creationtimestamp| type| source ---|---|--- 2026-08-03 17:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7iwzrmzosnkxj 2026-08-04 06:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadq2mz572l...

EUVD-2026-52339

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

CVE-2026-68586

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyhkwq72o 2026-09-03 22:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-36v8-mpjm-8j5r 2026-09-04 14:31:53+00:00| seen|...

CVE-2026-68584

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyg64yp2u 2026-09-03 22:31:26+00:00| seen| https://gist.github.com/alon710/4d2d0e14cc9fbf8c2c4ec8fd41b0edff 2026-09-08 20:35:24+00:00| published-proof-of-concept|...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verifyxml when no trust anchor is configured. verifyxml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XML::Sig chec...

CVE-2026-8793

creationtimestamp| type| source ---|---|--- 2026-08-03 12:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ms6jxjcufv2l 2026-08-17 18:00:07+00:00| seen| Telegram/TuDwnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY 2026-08-18 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verifyxml when no trust anchor is configured. verifyxml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XML::Sig chec...

Exploit for CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook In...

CVE-2026-33591

creationtimestamp| type| source ---|---|--- 2026-08-03 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117031464187150211 2026-08-03 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms6h6fbd2l2i 2026-08-05 13:00:07+00:00| seen|...

CVE-2026-69082

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-17583

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:38+00:00| seen| https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 2026-08-03 10:01:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms6ajowixy2u 2026-08-03 11:17:27+00:00|...

CVE-2026-69082 Cross-Site Request Forgery in the Administrative User Deletion Endpoint

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-69082

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-69082

CTI-Transmute exposes a CSRF vulnerability in the admin user-deletion endpoint: /account/delete/ accepts HTTP GET, allowing an attacker to induce an authenticated admin to delete a user via a forged request. Exploitation requires an active admin session but no CTI-Transmute account or admin privi...