CVE-2026-40783

creationtimestamp| type| source ---|---|--- 2026-06-18 05:07:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mok2knrcv52i...

CVE-2026-12390

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-02 2026-06-18 21:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molqnbrciv2i...

CVE-2026-50034

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01 2026-06-18 20:07:56+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g...

CVE-2026-40456

creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwe2efrh23...

CVE-2026-40455

creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwmyt6s62t...

CVE-2026-50643

creationtimestamp| type| source ---|---|--- 2026-06-18 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-50643 2026-06-18 11:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokroeslwu2f...

CVE-2026-12569

creationtimestamp| type| source ---|---|--- 2026-06-18 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojojjvsnz2c 2026-06-18 02:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojqerhu472k 2026-06-25 19:26:46+00:00| seen|...

CVE-2026-48768

creationtimestamp| type| source ---|---|--- 2026-06-18 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojjj35nrc2t 2026-06-18 01:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojpsuhhbw2z 2026-06-19 14:10:24+00:00| seen|...

CVE-2026-49133

creationtimestamp| type| source ---|---|--- 2026-06-17 23:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhot6zj72f...

CVE-2026-54387

creationtimestamp| type| source ---|---|--- 2026-06-17 23:23:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v...

CVE-2026-11407

creationtimestamp| type| source ---|---|--- 2026-06-17 23:08:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgm4xmdy2j...

Malicious code in uol-simple-api-futebol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962c38ed6ec061ce6a530aeea5a960dfc2b75caec56f7a1bc648f6b6cb655271 The package's only documented function, getJogos default export, unconditionally invokes an internal helper named prepareCacheMatchs which POSTs the...

CVE-2026-53805

creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...

CVE-2026-7300

creationtimestamp| type| source ---|---|--- 2026-06-17 21:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbse7s6j2k...

CVE-2025-36220

creationtimestamp| type| source ---|---|--- 2026-06-17 21:15:25+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojabhsgt52t...

CVE-2026-48142

creationtimestamp| type| source ---|---|--- 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1929 2026-06-18 13:10:33+00:00| seen|...

CVE-2026-48814

creationtimestamp| type| source ---|---|--- 2026-06-17 20:30:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moj5qnuvcd2w 2026-06-17 22:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c 2026-06-19 13:34:24+00:00| published-proof-of-concept|...

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

Summary A critical missing authorization flaw exists in Avo's association attach workflow. The UI and GET /resources/:resource/:id/:related/new path can check attach?, but the actual write endpoint, POST /resources/:resource/:id/:related, does not run the same authorization check before mutating...

CVE-2026-12515

creationtimestamp| type| source ---|---|--- 2026-06-17 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moix4m6zw52r...

CVE-2026-20190

creationtimestamp| type| source ---|---|--- 2026-06-17 18:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928 2026-06-18 13:15:12+00:00| seen|...