CVE-2026-18200

The FoodBoxBooker WordPress plugin versions prior to 1.0.8 contains an authorization bypass vulnerability. The plugin fails to verify that the user account being updated belongs to the user initiating the request. This flaw allows authenticated users with Subscriber-level access and above to modi...

CVE-2026-21060: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2026-19348

creationtimestamp| type| source ---|---|--- 2026-08-09 12:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k 2026-08-09 12:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23 2026-08-09 16:00:46+00:00| seen|...

CVE-2026-62896

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheahnqgq2z 2026-08-07 01:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msheas63f42z 2026-08-08 08:07:07+00:00| seen|...

CVE-2026-53985

creationtimestamp| type| source ---|---|--- 2026-08-06 16:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fddtrz4hv643 2026-08-06 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjear6dd2n...

CVE-2026-67261

creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i37bwfbsgkjvx 2026-08-06 16:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxtqwo52u 2026-08-06 20:01:01+00:00| seen|...

CVE-2026-61466

creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s 2026-08-06 21:05:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo 2026-08-07 09:37:07+00:00| seen|...

CVE-2026-65583

creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc6pvha2u 2026-08-06 21:18:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2va2wi2b4zgy6 2026-08-07 09:07:06+00:00| seen|...

CVE-2026-68079

creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h 2026-08-06 21:24:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h 2026-08-07 04:07:06+00:00| seen|...

CVE-2026-15991

creationtimestamp| type| source ---|---|--- 2026-08-06 06:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4sbtz6qg7nzt6 2026-08-06 07:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfhtbrd3h2a 2026-08-06 08:54:07+00:00| seen|...

keycloak-admin-ui: keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

MAL-2026-12313 Malicious code in @ccfly/setup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcod...

MAL-2026-12387 Malicious code in gekko-mev-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b8b89beb9e8245f1a13fbaf7fc18719f0b87c12bba7e7dcaf3321e7127020e The package presents itself as an Ethereum MEV bot, but bin/gekko-bot.js silently spawns lib/stealth.js as a detached, stdio-ignored background child...

CVE-2026-71206

creationtimestamp| type| source ---|---|--- 2026-08-05 11:09:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msdfahr6m52a 2026-08-05 11:09:14+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117042587175345568 2026-08-17 18:00:04+00:00| seen|...

CVE-2026-44945

creationtimestamp| type| source ---|---|--- 2026-08-05 10:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcpujkg723 2026-08-05 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042434875220625 2026-08-05 10:30:28+00:00| seen|...

CVE-2026-10090

creationtimestamp| type| source ---|---|--- 2026-08-05 10:18:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gzht5h26j6cgw 2026-08-05 10:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcme5m4p2o 2026-08-05 11:31:08+00:00| seen|...

SUSE CVE-2026-65913

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

CVE-2026-24254

creationtimestamp| type| source ---|---|--- 2026-08-04 18:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqxjsusacosnh 2026-08-04 19:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpr5hku22m 2026-08-05 09:30:27+00:00| seen|...

CVE-2026-14804

creationtimestamp| type| source ---|---|--- 2026-08-04 10:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7yueqk4ra6t2i 2026-08-04 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msasmexj4i2b 2026-08-04 10:30:35+00:00| seen|...

CVE-2026-14175

creationtimestamp| type| source ---|---|--- 2026-08-04 10:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe 2026-08-04 11:34:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g 2026-08-04 12:00:28+00:00| seen|...