CVE-2026-57706

creationtimestamp| type| source ---|---|--- 2026-07-14 01:32:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2rjvtom2y 2026-07-16 08:16:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsb3ykkt24...

CVE-2026-57697

creationtimestamp| type| source ---|---|--- 2026-07-14 01:26:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2fnhweh2d 2026-07-16 08:16:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsalh62e2y...

CVE-2026-57368

creationtimestamp| type| source ---|---|--- 2026-07-14 01:13:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzppqya627 2026-07-16 08:15:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs7bq6c42t...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

CVE-2026-27690

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b 2026-07-14 01:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26 2026-07-14 03:00:52+00:00| seen|...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through insufficient authorization checks in the postMemberAction and postActivityAction API endpoints. An attacker can expand their management scope to add users or activities outside their authorized visibility b...

tenda_v12_poc

Tenda V12 AC1200 VDSL V56.1.1.11 — formPingV6 Command Inje...

On the Security Implications of PQC in TLS: Handshake Exhaustion and IDS Degradation

Post-Quantum Cryptography PQC is increasingly being integrated into TLS 1.3 to enhance resilience against quantum-enabled attacks. However, the additional computational and communication overhead introduced by PQC primitives during the handshake phase may also amplify the impact of TLS handshake...

PT-2026-58942

Summary: Remote post-serve actions use http.DefaultClient without any timeout configuration. When the remote endpoint is unreachable or intentionally slow accepts TCP connection but never responds, each triggered proxy request spawns a goroutine that blocks indefinitely on http.DefaultClient.Do. ...

PT-2026-60082

Name of the Vulnerable Software and Affected Versions Hoverfly version 1.12.7 Description Remote post-serve actions use http.DefaultClient without a timeout configuration. When a remote endpoint is unreachable or intentionally slow, each triggered proxy request spawns a goroutine that blocks...

CVE-2026-45755: Missing Authentication for Critical Function

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged...

ZTE ZXHN H8102E H168N H167A H199A H288A H198A H

The vulnerability of the post.parsedata function in ZTE ZXHN H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q routers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious...

PT-2026-58903

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...

Tenda CH22 Router Code Execution

The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the PATCH /api/timesheets/id and POST /api/timesheets endpoints, which accept a user-supplied project ID that is resolved through a query builder allowing the submitted ID to bypass...

CVE-2026-47677

creationtimestamp| type| source ---|---|--- 2026-07-13 23:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkvb4cg3r2v 2026-07-14 00:35:03+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-c67f-gmxw-mj93...

CVE-2026-56354

creationtimestamp| type| source ---|---|--- 2026-07-13 23:47:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkuurjwsp2c...

CVE-2026-57215

creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...

FacturaScripts: Account takeover of any 2FA-enabled user

Authentication bypass in FacturaScripts: /login?action=two-factor-validation accepts brute-forceable TOTP without password or CSRF protection Summary Core/Controller/Login.php::twoFactorValidationAction accepts an unauthenticated POST containing only fsNick and fsTwoFactorCode. If the TOTP value...

CVE-2026-62188

creationtimestamp| type| source ---|---|--- 2026-07-13 23:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqktx6xbvt27 2026-09-07 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muwtlz3dha2p...