CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...

CVE-2024-14037

creationtimestamp| type| source ---|---|--- 2026-07-02 19:15:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoqlg2xhx27 2026-07-02 19:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpor5j4quo2v 2026-07-02 20:20:45+00:00| seen|...

CVE-2026-55119

creationtimestamp| type| source ---|---|--- 2026-07-02 18:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpopif3kwk2a 2026-07-03 07:27:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzgy6epo2n 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55110

creationtimestamp| type| source ---|---|--- 2026-07-02 18:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpop7glvx22w 2026-07-03 07:07:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppydky5l42i 2026-07-08 11:01:21+00:00| seen|...

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Summary EntriesController::actionSaveEntry performs entry-edit permission checks before request-controlled author changes are applied to the model. The subsequent author mutation path accepts attacker-supplied authors / author parameters and allows the change when the current user is one of the o...

CVE-2026-7311

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...

CVE-2026-7311

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress (up to version 3.6.13) is vulnerable to arbitrary file deletion due to insufficient file path validation in delete_converted_image_size. Authenticated attackers with author-level access can delete arbitrary files on the server ...

CVE-2026-7311 TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...

CVE-2026-55116

creationtimestamp| type| source ---|---|--- 2026-07-02 18:31:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoo4atcsr2w 2026-07-03 08:31:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq4zlwqt52c 2026-07-03 21:38:06+00:00| seen|...

CVE-2026-54401

creationtimestamp| type| source ---|---|--- 2026-07-02 18:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpony4gxfx2z 2026-07-03 07:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyectjt62c 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55115

creationtimestamp| type| source ---|---|--- 2026-07-02 18:27:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponu6s7dz2j 2026-07-03 07:13:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppypbjmeg2w 2026-07-03 08:30:37+00:00| seen|...

CVE-2026-55114

creationtimestamp| type| source ---|---|--- 2026-07-02 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponeajoqd2v 2026-07-03 07:05:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyayifuw27 2026-07-07 05:07:08+00:00| seen|...

CVE-2026-54404

creationtimestamp| type| source ---|---|--- 2026-07-02 18:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponbkeuld2v 2026-07-03 19:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprczq72g72f 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-13743

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-02 2026-07-02 20:21:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoub7zdge2x 2026-07-03 12:23:48+00:00| seen|...

CVE-2025-58902

creationtimestamp| type| source ---|---|--- 2026-07-02 17:05:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpojbp3e6w2v 2026-07-03 03:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplzmqmgt2k 2026-07-03 11:39:39+00:00| seen|...

CVE-2024-14037 Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed...

CVE-2026-56842

creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4mzudb2v 2026-07-02 18:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpooxqxrlq2z 2026-07-03 07:26:23+00:00| seen|...

CVE-2026-14355

creationtimestamp| type| source ---|---|--- 2026-07-02 14:39:44+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpob5prgns2v 2026-07-02 14:41:26+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpobaraj7c2v 2026-07-02 14:43:07+00:00| seen|...

CVE-2026-54263

creationtimestamp| type| source ---|---|--- 2026-07-02 14:28:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoajono6c2o 2026-07-03 13:21:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnasm4g32y...

CVE-2026-54704

creationtimestamp| type| source ---|---|--- 2026-07-02 14:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoagu42pq2i 2026-07-03 09:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqa7twgj52w 2026-07-29 19:31:52+00:00| seen|...