CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...

CVE-2026-15477

creationtimestamp| type| source ---|---|--- 2026-07-12 05:32:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqghb752f32x 2026-07-12 07:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgpgpsue72z...

CVE-2026-15472

creationtimestamp| type| source ---|---|--- 2026-07-12 02:29:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqg4ybolty2x 2026-07-12 03:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgb3vihax2w 2026-07-12 03:52:55+00:00| seen|...

PT-2026-57549

Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API keys to invoke org-scoped webhook operations. Attackers with app-scoped credentials can trigger signed outbound webhook deliveries for arbitrary organization webhooks...

CVE-2026-56252: Incorrect Authorization

Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API keys to invoke org-scoped webhook operations. Attackers with app-scoped credentials can trigger signed outbound webhook deliveries for arbitrary organization webhooks...

CVE-2026-56281: Improper Neutralization of Special Elements used in an SQL Command

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/adminstats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL queries via template literals. An attacker with platform adm...

Linux Distros Unpatched Vulnerability : CVE-2024-37305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum...

Malicious code in tinyparrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7ebbcc82edaa241764193ea85c0492b99f9ed3be805c57ef0914518cd4b6f9 The postinstall script src/build.js reconstructs the strings 'https', 'POST', and the destination host 'rnjkerbf.org/P' from integer-encoded arrays v...

CVE-2024-10123

creationtimestamp| type| source ---|---|--- 2026-07-11 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfrpbolvk2s...

GHSA-6G59-GM2V-QHVQ

creationtimestamp| type| source ---|---|--- 2026-07-11 17:13:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5we2xf52x...

GHSA-FJ8F-M44G-C479

creationtimestamp| type| source ---|---|--- 2026-07-11 17:11:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j 2026-10-08 12:34:17+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mxehtmrzbl2i...

GHSA-2XV2-W8CQ-5GXW

creationtimestamp| type| source ---|---|--- 2026-07-11 17:08:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5o6os3s2j...

CVE-2026-61870

creationtimestamp| type| source ---|---|--- 2026-07-11 15:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeyuxuuok2l...

GHSA-4MP6-8448-9VGV Duplicate Advisory: PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qj9c-59p6-8cgx. This link is maintained to preserve external references. Original Description PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated...

GHSA-G3PQ-3VVX-36W6 Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references. Original Description PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key...

CVE-2026-56763

creationtimestamp| type| source ---|---|--- 2026-07-11 14:43:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevjxoudi2f 2026-07-11 16:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqezy366wt2e...

CVE-2026-56240

creationtimestamp| type| source ---|---|--- 2026-07-11 14:39:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeve5iuvl2x 2026-07-12 11:39:49+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqh3qwdo2326...

CVE-2026-61428

creationtimestamp| type| source ---|---|--- 2026-07-11 14:35:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev3wf3rx2a 2026-07-11 16:17:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2swit5a26 2026-10-07 14:06:56+00:00| published-proof-of-concept|...