CVE-2026-48953

creationtimestamp| type| source ---|---|--- 2026-07-07 19:54:50+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3f3s3qnt2c 2026-07-07 21:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3j25jxpy25 2026-07-08 14:15:07+00:00| seen|...

Indico may disclose unauthorized user details access via legacy API

ImpactA legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check. PatchesYou should to update to Indico 3.3.8 as soon as possible.See the docs for instructions on how to update. WorkaroundsIt is...

PYSEC-2026-1250 CKAN has an XSS vector in user uploaded images in group/org and user profiles

Impact Using a specially crafted file, a user could potentially upload a file containing code that when executed could send arbitrary requests to the server. If that file was opened by an administrator, it could lead to escalation of privileges of the original submitter or other malicious actions...

CKAN has an XSS vector in user uploaded images in group/org and user profiles

ImpactUsing a specially crafted file, a user could potentially upload a file containing code that when executed could send arbitrary requests to the server. If that file was opened by an administrator, it could lead to escalation of privileges of the original submitter or other malicious actions...

CVE-2026-49487

creationtimestamp| type| source ---|---|--- 2026-07-07 11:58:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2kivueir2a 2026-07-07 12:21:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2lqz4bcq2i...

CVE-2026-48891

creationtimestamp| type| source ---|---|--- 2026-07-07 11:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y 2026-07-07 12:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y...

CVE-2026-14474

creationtimestamp| type| source ---|---|--- 2026-07-07 11:15:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mq2i2pjj742r 2026-07-07 11:22:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2igwm4s22b 2026-07-21 16:50:23+00:00| seen|...

CVE-2026-34158

creationtimestamp| type| source ---|---|--- 2026-07-07 06:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwivnajh2p 2026-07-07 07:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23laf7j42a...

PT-2026-56237

Name of the Vulnerable Software and Affected Versions Chevereto versions 3.7.5 through 4.5.3 Description An issue exists in the self-hosted media-sharing platform where the /json AJAX listing endpoint fails to enforce private profile restrictions. While the profile HTML route /username correctly...

CVE-2026-24013

creationtimestamp| type| source ---|---|--- 2026-07-06 19:09:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpys3zc3ua2g 2026-07-06 20:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywluimbu2z 2026-07-08 06:37:06+00:00| seen|...

How to tell if an image is AI-generated

A photo of an injured dog by the roadside. A dating profile with pictures that look almost too perfect. A donation appeal showing a family stranded on a rooftop after a flood. Scammers are already using AI-generated images to support fake stories, build trust, and persuade people to send money or...

CERTFR-2026-ACT-029

creationtimestamp| type| source ---|---|--- 2026-07-06 13:55:41+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mpyakobmvx2m 2026-07-06 13:55:47+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116873372689629084 2026-07-06 15:54:46+00:00| seen|...

CVE-2026-11766 Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields

The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea profile fields before outputting it on user profiles, allowing authenticated users with Subscriber-level access and above to store JavaScript that executes when any user, includin...

CVE-2026-57322

creationtimestamp| type| source ---|---|--- 2026-07-05 10:16:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpvdtuhers2u 2026-07-05 10:16:33+00:00| seen| https://bsky.app/profile/potato.software/post/3mpvdtvadpc2b...

CVE-2026-59092

creationtimestamp| type| source ---|---|--- 2026-07-03 15:05:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqt322vpe2l 2026-07-03 15:09:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtcm3jca2n...

CVE-2026-50281

creationtimestamp| type| source ---|---|--- 2026-07-03 08:40:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5kgd4zs2j 2026-07-03 09:34:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqalb4gdi26 2026-07-03 09:34:52+00:00| seen|...

CVE-2026-50282

creationtimestamp| type| source ---|---|--- 2026-07-03 08:24:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpq4ndri4a2i 2026-07-03 08:24:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq4neltfq2n 2026-07-03 09:30:24+00:00| seen|...

CVE-2026-12734

creationtimestamp| type| source ---|---|--- 2026-07-03 06:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppwolplpz2h 2026-07-03 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mppytfkyxp2z 2026-07-03 19:25:49+00:00| seen|...

CVE-2026-12729

creationtimestamp| type| source ---|---|--- 2026-07-03 06:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mppvi4utaj27 2026-07-03 06:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppvtqe2el2h 2026-07-03 19:25:00+00:00| seen|...

CVE-2026-10140

creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...