39591 matches found
CVE-2026-54512
creationtimestamp| type| source ---|---|--- 2026-06-16 01:10:42+00:00| published-proof-of-concept| https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm 2026-06-24 00:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymp44sqy23 2026-07-12...
CVE-2026-5064
creationtimestamp| type| source ---|---|--- 2026-06-16 00:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekxellhv2p...
CVE-2026-48157
creationtimestamp| type| source ---|---|--- 2026-06-16 00:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moek4j5hxb2i...
PT-2026-50086
Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.48 Description Improper Control of Generation of Code allows for Remote Code Inclusion and unauthenticated Remote Code Execution RCE. This issue enables an attacker to...
PT-2026-49620
Name of the Vulnerable Software and Affected Versions Abandoned Contact Form 7 versions prior to 2.3 Description The plugin allows unauthenticated attackers to permanently delete arbitrary posts, pages, or other content on a site. This occurs because the action remove abandoned function, register...
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
The safeevalexpression function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes giframe, fback, fbuiltins do NOT start with underscore, enabling a complete sandbox escape to achieve arbitrary...
PT-2026-50153
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.8.1 Description When the fetch function is called, the runtime validates the destination hostname against --deny-net rules but fails to re-verify the IP addresses that the hostname resolves to. This allows an...
CVE-2026-48714
creationtimestamp| type| source ---|---|--- 2026-06-15 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7y4spa2t 2026-06-16 00:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekfhn56c2n 2026-06-16 01:30:27+00:00| seen|...
CVE-2026-11850
creationtimestamp| type| source ---|---|--- 2026-06-15 22:40:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3moee4eyg372o 2026-07-21 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5pjbkd2z 2026-07-29 12:01:42+00:00| seen|...
CVE-2026-11832
creationtimestamp| type| source ---|---|--- 2026-06-15 22:14:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moecmi2a4n2q 2026-06-15 23:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeiet2rl42p 2026-06-17 07:00:40+00:00| seen|...
CVE-2026-52703
creationtimestamp| type| source ---|---|--- 2026-06-15 22:12:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeckkecr52j 2026-06-15 23:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moefb56g4m2n 2026-06-16 04:30:28+00:00| seen|...
CVE-2026-52694
creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebumcksd2i...
CVE-2026-9691
creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebufj5dv2n 2026-06-15 23:55:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeibhgxeo2f 2026-07-13 22:00:41+00:00| seen|...
CVE-2026-49768
creationtimestamp| type| source ---|---|--- 2026-06-15 21:48:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeb5qmalx2p 2026-06-15 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moeg3ilcz52k 2026-06-16 06:00:36+00:00| seen|...
CVE-2026-49780
creationtimestamp| type| source ---|---|--- 2026-06-15 21:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeadytsfx2a 2026-06-16 03:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moesmvn3m22n 2026-06-22 20:16:07+00:00| seen|...
EUVD-2026-36937
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
EUVD-2026-36777
An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...
EUVD-2026-36784
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
