CVE-2026-4653

creationtimestamp| type| source ---|---|--- 2026-07-09 23:07:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqs2htoe2y 2026-07-09 23:07:28+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqaqs2m7yb27...

CVE-2026-58122

creationtimestamp| type| source ---|---|--- 2026-07-09 21:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqamhqf4fl2z 2026-07-09 22:59:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaqdeat3r27 2026-07-09 23:01:52+00:00| seen|...

MAL-2026-10081 Malicious code in webrix-docs1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cdefe1415c5b5245f36b10ea0de9033433b479768c2cc785ad2742b9433fce The package declares a preinstall hook node index.js that fires automatically on npm install. The script requires childprocess, os, https, and http,...

MAL-2026-10019 Malicious code in client-cookies-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12870ae203f2612ab2bf9e796583acba17914cd4699909156f86c643fcf51f24 package.json declares postinstall=node index.js, which runs automatically on npm install. index.js collects host identifiers via os.hostname,...

CVE-2026-50644

creationtimestamp| type| source ---|---|--- 2026-07-09 12:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lrrsktt2i 2026-07-09 12:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-50644...

CVE-2026-56291

creationtimestamp| type| source ---|---|--- 2026-07-09 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116889906648087046 2026-07-09 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq7ljhukn42i 2026-07-09 12:03:01+00:00| seen|...

CVE-2026-12428

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...

EUVD-2026-42568

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getallvalues function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permissioncallback only verifies the...

CVE-2026-47840

creationtimestamp| type| source ---|---|--- 2026-07-09 07:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75qsv2b42w 2026-07-09 08:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7afnzxnt27 2026-07-09 17:37:25+00:00| seen|...

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Meta has announced that its new artificial intelligence AI model Muse Image lets people use public Instagram posts and reels to generate AI content, and it's enabled by default. "You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your...

CVE-2026-53166

creationtimestamp| type| source ---|---|--- 2026-07-08 19:53:22+00:00| seen| https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vhkasy22p 2026-07-08 19:55:17+00:00| seen| https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vkydkjc2p...

CVE-2026-0280

creationtimestamp| type| source ---|---|--- 2026-07-08 17:38:13+00:00| seen| https://bsky.app/profile/scotthogg.bsky.social/post/3mq5nwfhtlc2s 2026-07-08 19:03:27+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sossn5l2f 2026-07-09 04:46:13+00:00| seen|...

CVE-2018-20599

creationtimestamp| type| source ---|---|--- 2026-07-08 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5kj5avp323 2026-07-08 16:37:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq5kj6ilvn2v...

CVE-2026-41042

creationtimestamp| type| source ---|---|--- 2026-07-08 16:20:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jlooecl2f 2026-07-08 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5jrsw37s22 2026-08-17 18:00:03+00:00| seen|...

CVE-2026-56360

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

EUVD-2026-42258

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

CVE-2026-8307

creationtimestamp| type| source ---|---|--- 2026-07-08 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq56wwdaak2d 2026-07-08 13:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq57vsdkv525...

CVE-2026-56000

creationtimestamp| type| source ---|---|--- 2026-07-08 09:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4u3zer2n2w 2026-07-08 10:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4vtpanvm2k 2026-07-08 16:45:30+00:00| seen|...

CVE-2026-9695

creationtimestamp| type| source ---|---|--- 2026-07-08 08:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4q3f6wig2g 2026-07-08 08:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4qn5tej62d 2026-07-08 10:30:28+00:00| seen|...