CVE-2026-55518

Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach workflow checks attach? in the UI and GET /resources/:resource/:id/:related/new path, but the actual write endpoint, POST /resources/:resource/:id/:related, does not run t...

CVE-2020-35777

creationtimestamp| type| source ---|---|--- 2026-07-17 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqum4lftbj22...

CVE-2026-8859

creationtimestamp| type| source ---|---|--- 2026-07-17 20:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulmi3kxg2e 2026-07-17 22:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqusj4xzp62g 2026-07-18 12:00:55+00:00| seen|...

CVE-2026-8505

creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulivjdmi24 2026-07-17 22:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mququiyq3u2s 2026-07-18 10:30:29+00:00| seen|...

CVE-2026-58195

creationtimestamp| type| source ---|---|--- 2026-07-17 20:07:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqukhwow4x24 2026-07-18 19:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6p3mc52u...

CVE-2026-47180

creationtimestamp| type| source ---|---|--- 2026-07-17 20:02:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquk7cskbr2q...

CVE-2026-49284

creationtimestamp| type| source ---|---|--- 2026-07-17 19:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujisgyt52s...

GO-2026-5975 Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly...

CVE-2026-9103

creationtimestamp| type| source ---|---|--- 2026-07-17 19:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquhsueppf2r 2026-07-17 19:56:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujujfe3s2s 2026-07-17 20:00:44+00:00| seen|...

CVE-2026-9585

creationtimestamp| type| source ---|---|--- 2026-07-17 19:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhpfzgv32j...

CVE-2026-57860

creationtimestamp| type| source ---|---|--- 2026-07-17 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o 2026-07-19 08:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f...

CVE-2026-12715

creationtimestamp| type| source ---|---|--- 2026-07-17 18:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqueythh4l2g...

Allocation of Resources Without Limits or Throttling

Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the handlepost method of lib/mcp/server/transports/streamablehttptransport.rb, which reads the entire...

CVE-2026-51083

creationtimestamp| type| source ---|---|--- 2026-07-17 18:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mque7ahppv2e...

CVE-2026-16089

creationtimestamp| type| source ---|---|--- 2026-07-17 18:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquddqpw7u24...

CVE-2026-9592

creationtimestamp| type| source ---|---|--- 2026-07-17 17:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucono4e72s...

laurel v0.8.2

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

CVE-2026-47867

creationtimestamp| type| source ---|---|--- 2026-07-17 16:03:47+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i 2026-07-17 16:15:23+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:00:42+00:00| seen|...

CVE-2026-63097

Dendrite 0.13.8 is affected by an improper access-control in the syncapi /context endpoint (syncapi/routing/context.go). The flaw uses a flawed membership check that only considers RoomExists, ignoring IsInRoom, HasBeenInRoom, and Membership fields, allowing authenticated local users who have lef...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...