CVE-2026-14156

creationtimestamp| type| source ---|---|--- 2026-07-01 02:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhlrc5oh2u 2026-07-02 08:22:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 09:46:05+00:00| seen|...

CVE-2026-54502

creationtimestamp| type| source ---|---|--- 2026-07-01 02:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgjjojkq2v 2026-07-02 01:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu4gwuxd2o...

CVE-2026-55223

creationtimestamp| type| source ---|---|--- 2026-07-01 01:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfpx3w632b...

CVE-2026-57149

creationtimestamp| type| source ---|---|--- 2026-07-01 00:05:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpk7teoycm2k 2026-09-22 20:12:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mw4zxpbs3p2r 2026-09-22 20:14:52+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-53433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated...

CVE-2026-50160: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Hoppscotch is an API development ecosystem. In self-hosted deployments of hoppscotch-backend from version 2026.4.1 and earlier, the unauthenticated POST /v1/onboarding/config endpoint is vulnerable to mass assignment. The global NestJS ValidationPipe is configured without whitelist: true, so extr...

PT-2026-54485

UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225-272, after strncpy s copies a rule token into temp1rule1 25-byte destination or temp2/temp3 16-byte destination, the code unconditionally writes a...

CVE-2026-57517: Improper Neutralization of Special Elements used in an SQL Command

Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges...

PT-2026-54511

The Slim SEO – A Fast & Automated SEO Plugin For WordPress plugin for WordPress is vulnerable to Unauthorized Private Content Disclosure in all versions up to, and including, 4.9.8 via the /wp-json/slim-seo/meta-tags/ai REST API endpoint. This is due to the endpoint's permission callback performi...

CVE-2026-11541

creationtimestamp| type| source ---|---|--- 2026-06-30 22:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk34s2k5x2u 2026-07-01 02:51:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpkj56ehry2l 2026-07-02 01:31:56+00:00| seen|...

CVE-2026-58449

creationtimestamp| type| source ---|---|--- 2026-06-30 22:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2bvcfe326 2026-07-02 20:45:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpovld6x432e...

CVE-2026-10109

creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w 2026-07-02 02:40:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v 2026-07-03 05:07:07+00:00| seen|...

CVE-2026-50254

creationtimestamp| type| source ---|---|--- 2026-06-30 22:09:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzdacbg42k 2026-07-01 02:36:53+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-10562

creationtimestamp| type| source ---|---|--- 2026-06-30 21:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjymnc2dq25...

CVE-2025-36321

creationtimestamp| type| source ---|---|--- 2026-06-30 21:51:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjye4qp2y2b 2026-07-01 18:56:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm6zlqvbs26...

CVE-2026-57687

creationtimestamp| type| source ---|---|--- 2026-06-30 21:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjwghxenc2c 2026-07-03 00:19:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mppbknna2w2r 2026-07-03 00:19:41+00:00| seen|...

CVE-2026-12073

creationtimestamp| type| source ---|---|--- 2026-06-30 20:17:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjt37jnli2e...

CVE-2026-11367

creationtimestamp| type| source ---|---|--- 2026-06-30 19:17:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjppwjmog2l...

WordPress Motors – Car Dealership & Classified Listings Plugin plugin <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Meta Modification vulnerability discovered by Michael Perla vizen5 - clixhouse in WordPress Plugin Motors versions = 1.4.111...

Accelerating the quantum-safe timeline

The quantum-safe timeline has changed For years, planning for post-quantum cryptography PQC was framed as a future problem: important, inevitable, but distant. That perspective is evolving as technology advances and organizations prepare for the scale and complexity of the transition ahead. At...