CVE-2026-14454

creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jcpi77c2k 2026-07-09 17:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqa5po5axo24...

CVE-2026-59253

creationtimestamp| type| source ---|---|--- 2026-07-08 16:12:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5j5g5ct72l...

CVE-2026-56776

creationtimestamp| type| source ---|---|--- 2026-07-08 16:09:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5iyjp3my2w...

CVE-2026-60125

creationtimestamp| type| source ---|---|--- 2026-07-08 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ipsgfyo2w...

CVE-2026-60124

creationtimestamp| type| source ---|---|--- 2026-07-08 15:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ieypywc2z...

CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...

CVE-2026-59725

CVE-2026-59725 affects Socket.IO’s Engine.IO polling transport (versions 4.1.0–6.6.6). The root cause is that invalid binary POST requests with Content-Type: application/octet-stream are not properly closing the HTTP response, enabling unauthenticated attackers to exhaust server-side connections ...

CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...

CVE-2018-20613

creationtimestamp| type| source ---|---|--- 2026-07-08 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5h5ttrao27...

CVE-2026-15062

creationtimestamp| type| source ---|---|--- 2026-07-08 15:24:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5ggkcovk2z 2026-07-08 17:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nauymdu2k...

EUVD-2026-42298

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...

CVE-2026-59702

Summary: CVE-2026-59702 affects repomix. A server-side request forgery exists in POST /api/pack, where unauthenticated attackers can cause the server to fetch arbitrary URLs without proper validation. The endpoint accepts http://, https://, and file:// URLs and passes them to git clone, enabling ...

CVE-2026-59702 repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...

GHSA-W54J-7WPM-CRHJ

creationtimestamp| type| source ---|---|--- 2026-07-08 14:44:37+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e7yeusk2s...

CVE-2019-10663

creationtimestamp| type| source ---|---|--- 2026-07-08 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5dskju6a2g...

CVE-2026-56360

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

CVE-2026-54061

creationtimestamp| type| source ---|---|--- 2026-07-08 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5cjezgt22z...

CVE-2019-10660

creationtimestamp| type| source ---|---|--- 2026-07-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5ahbcwux2s...

CVE-2026-6818

creationtimestamp| type| source ---|---|--- 2026-07-08 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq57bpuwyo2p...

CVE-2026-57260

creationtimestamp| type| source ---|---|--- 2026-07-08 12:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq54c2bmsp26...