CVE-2026-60000

creationtimestamp| type| source ---|---|--- 2026-07-08 04:09:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ar27dxt2i...

CVE-2026-59996

creationtimestamp| type| source ---|---|--- 2026-07-08 04:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ai3r6lf2w 2026-07-08 22:47:27+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mq677cepsk2y 2026-07-10 08:02:23+00:00| seen|...

CVE-2026-55429

creationtimestamp| type| source ---|---|--- 2026-07-08 03:36:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq46vx56ta24 2026-07-09 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqa2y2ktgq25...

CVE-2026-55427

creationtimestamp| type| source ---|---|--- 2026-07-08 03:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq46e2c6zy2t 2026-07-18 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqvzexgt5q2v...

CVE-2026-55077

creationtimestamp| type| source ---|---|--- 2026-07-08 00:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x...

CVE-2026-14739

creationtimestamp| type| source ---|---|--- 2026-07-08 00:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3uqppnkw2i 2026-07-08 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5ccbcr3u2b 2026-07-09 09:42:04+00:00| seen|...

CVE-2026-49033

creationtimestamp| type| source ---|---|--- 2026-07-08 00:22:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tzxvs5x2q...

CVE-2020-14412

creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3t6uosqs2d...

CVE-2026-31309

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request...

CVE-2026-58583

creationtimestamp| type| source ---|---|--- 2026-07-07 23:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rfwfy5v2t...

CVE-2026-57172

creationtimestamp| type| source ---|---|--- 2026-07-07 23:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3r323sfn2i...

CVE-2026-53511

creationtimestamp| type| source ---|---|--- 2026-07-07 23:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3quv37dx2k 2026-07-11 00:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdggb7dsr2a...

CVE-2020-27848

creationtimestamp| type| source ---|---|--- 2026-07-07 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3micjbso2o...

CVE-2026-46354

creationtimestamp| type| source ---|---|--- 2026-07-07 21:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v 2026-07-08 00:17:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l 2026-07-09 07:07:08+00:00| seen|...

CVE-2026-48955

creationtimestamp| type| source ---|---|--- 2026-07-07 21:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Am I affected? Users are affected if all of the following are true: - Their application uses @better-auth/sso at a version = 0.1.0, 1.6.11 on the stable line, or any 1.7.0-beta.x on the pre-release line. - The sso plugin is added to their application's betterAuth plugins: ... array. - Any user wi...

CVE-2026-48956

creationtimestamp| type| source ---|---|--- 2026-07-07 20:48:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3i3hz3pq27 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-50530 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link token and fails to validate whether tableId and field IDs in the request body belong to the shared resource, allowing...

CVE-2026-59707

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707

CVE-2026-59707 : LocalAI exposes an unauthenticated SSRF via POST /models/apply. The endpoint forwards unsanitized gallery URL fields to gallery.GetGalleryConfigFromURLWithContext, allowing requests to internal/private/loopback URLs and leaking partial responses in error messages. No exploitation...