CVE-2026-59240

creationtimestamp| type| source ---|---|--- 2026-07-28 00:06:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4hrp7s727...

CVE-2026-65440

creationtimestamp| type| source ---|---|--- 2026-07-28 00:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4bmo6yw2j 2026-07-28 11:13:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpbrjlasm2z...

RedAmon 6.2.5

An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merged patch, with human oversight at every...

(EC)2: Event-Centric Explainability for Cybersecurity through Multi-Agent LLM Investigations

Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational investigations. To effectively handle alerts, analysts need to know contextual relationships and need actionable...

PT-2026-65457

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and...

PT-2026-65518

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom fields manage permission to execute arbitrary Ruby code by supplying a malicious expression through the select eval custom field type. Attackers can store an...

PT-2026-65394

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages...

PT-2026-65417

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-12800: Improper Neutralization of Special Elements used in an SQL Command

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST API endpoint in versions up to, and including, 6.2.0. This is due to insufficient escaping on the user-supplied...

Malicious Package

Overview bigops-rx-post-message is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-56747

creationtimestamp| type| source ---|---|--- 2026-07-27 22:20:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrnwjsjoem2m...

CVE-2017-7323

creationtimestamp| type| source ---|---|--- 2026-07-27 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnvspu43r2y...

CVE-2026-66824

creationtimestamp| type| source ---|---|--- 2026-07-27 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnvnchfda2s 2026-07-30 04:58:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnpfqkqd2e...

CVE-2014-2029

creationtimestamp| type| source ---|---|--- 2026-07-27 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnp45chzd2m...

CVE-2026-64645

creationtimestamp| type| source ---|---|--- 2026-07-27 19:23:27+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmo3cb4v2l...

GHSA-PM35-FQVH-CQ5G

creationtimestamp| type| source ---|---|--- 2026-07-27 19:17:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmdahelz2n...

CVE-2018-13012

creationtimestamp| type| source ---|---|--- 2026-07-27 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnlqtkadf2i...

CVE-2026-14289

creationtimestamp| type| source ---|---|--- 2026-07-27 19:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnlhthk4s22...

CVE-2026-51303

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnleby5dt2v...

Aftercall ads are driving Android users crazy

Aftercall is a wave of deceptive Android apps on Google Play that pose as everyday tools while bombarding users with pop-up ads after every phone call. When an unexpected ad pops up every time you hang up a call, it will slowly drive you crazy, especially if you can’t figure out what's causing it...