CVE-2026-61459

creationtimestamp| type| source ---|---|--- 2026-07-10 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcwt4rkti2r 2026-07-10 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxkwmxco2h 2026-07-10 20:51:13+00:00| seen|...

CVE-2026-15283

creationtimestamp| type| source ---|---|--- 2026-07-10 19:55:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwiu4xlp2x...

CVE-2026-43752

creationtimestamp| type| source ---|---|--- 2026-07-10 19:04:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqctoyn4qp2f...

CVE-2026-49256

creationtimestamp| type| source ---|---|--- 2026-07-10 18:52:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcszp52g62d...

CVE-2026-5801

creationtimestamp| type| source ---|---|--- 2026-07-10 18:52:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsycg2de25 2026-07-10 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcwsvtxff2d 2026-07-10 20:41:14+00:00| seen|...

CVE-2026-59151

creationtimestamp| type| source ---|---|--- 2026-07-10 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsuscyeq2z 2026-07-10 20:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcysjpafd2g 2026-07-11 01:13:41+00:00| seen|...

CVE-2026-15299

creationtimestamp| type| source ---|---|--- 2026-07-10 18:47:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcspog65f2c...

CVE-2026-1667

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2026-56765

creationtimestamp| type| source ---|---|--- 2026-07-10 16:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcltiwe322h 2026-07-12 07:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7kzfna2w...

CVE-2026-56261

creationtimestamp| type| source ---|---|--- 2026-07-10 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclthdrpr2f 2026-07-12 07:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7rjqh62r 2026-07-14 03:07:06+00:00| seen|...

CVE-2026-61456

creationtimestamp| type| source ---|---|--- 2026-07-10 16:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclhnwrcu2e 2026-07-10 20:20:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxwefthh2a 2026-07-10 22:19:19+00:00| seen|...

EUVD-2026-42950

grav-plugin-admin is an HTML user interface that provides a way to configure Grav and create and modify pages. In 1.10.52 and earlier, an authenticated attacker with admin.users permission can change the password of any user account, including the super administrator, by sending a direct POST...

CVE-2026-59190 Grav Admin Plugin — IDOR Privilege Escalation via saveUser()

grav-plugin-admin is an HTML user interface that provides a way to configure Grav and create and modify pages. In 1.10.52 and earlier, an authenticated attacker with admin.users permission can change the password of any user account, including the super administrator, by sending a direct POST...

CVE-2026-1667

The CVE concerns the SEO Plugin by Squirrly SEO for WordPress (up to version 14.0.0) with a vulnerability in savePost() that allows unauthenticated users to create arbitrary posts and, if Advanced Custom Fields is installed, to inject stored XSS scripts. Root cause is a leak of an API token and i...

CVE-2026-1667 SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2026-61444

creationtimestamp| type| source ---|---|--- 2026-07-10 16:15:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqck7yabkh27 2026-07-10 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclwzjjnb2f 2026-07-10 20:16:31+00:00| seen|...

CVE-2026-61434

creationtimestamp| type| source ---|---|--- 2026-07-10 16:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjxeiech2k 2026-07-10 20:19:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxuudb3h2a 2026-07-10 23:30:34+00:00| seen|...

CVE-2026-61455

creationtimestamp| type| source ---|---|--- 2026-07-10 16:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjml5p5g2q 2026-07-10 20:20:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxvm3lsn26 2026-07-10 20:20:06+00:00| seen|...

MAL-2026-10128 Malicious code in ohcm-culture-formatting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5679f4434881406ce5af055e04a3ab7403158df3404c928a7fbc67596d0e9631 [email protected] declares a preinstall hook "preinstall": "node index.js" that auto-executes on npm install. index.js uses...

CVE-2026-59792

creationtimestamp| type| source ---|---|--- 2026-07-10 15:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcgw3rsma2f 2026-07-10 20:17:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxqwt2442e 2026-07-11 00:32:28+00:00| seen|...