EUVD-2026-54869

A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component runopenlane/viewwaveform. The manipulation of the argument designname/vcdfile leads to command injection. Local access is required to approach this...

CVE-2026-71992

creationtimestamp| type| source ---|---|--- 2026-08-09 03:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117063314524225568 2026-08-09 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msmlsamc5x24...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

CVE-2026-71988

creationtimestamp| type| source ---|---|--- 2026-08-09 02:02:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmihftfgd2y 2026-08-09 09:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msn7vxua2v2k...

CVE-2026-19325

IncomeStreamSurfer roo-code-memory-bank-mcp-server exposes a local path traversal in read_memory_bank_file/append_memory_bank_entry (readMemoryBankFile/appendMemoryBankEntry) affecting src/index.ts. The attack hinges on manipulating file_name to traverse directories. Details in CVE-2026-19325 ind...

CVE-2023-30000

creationtimestamp| type| source ---|---|--- 2026-08-09 01:19:36+00:00| published-proof-of-concept| Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli9yVwlxO3uxT68v6BA...

CVE-2026-71989

creationtimestamp| type| source ---|---|--- 2026-08-09 00:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcmex6mq2z...

EUVD-2026-54836

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

CVE-2026-18988

creationtimestamp| type| source ---|---|--- 2026-08-08 21:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslykpomvr2a...

CVE-2026-71957

creationtimestamp| type| source ---|---|--- 2026-08-08 18:08:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslnwrthta2v...

CVE-2026-20346

creationtimestamp| type| source ---|---|--- 2026-08-08 15:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117060495821023885 2026-08-10 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...

CVE-2026-19195

creationtimestamp| type| source ---|---|--- 2026-08-08 12:06:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059799868254552 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97246 2026-08-09 14:02:14+00:00| published-proof-of-concept|...

Exploit for CVE-2026-64638

💥 CVE‑2026‑64638 – WordPress XSS2Shell S...

CVE-2026-66060

creationtimestamp| type| source ---|---|--- 2026-08-08 11:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059546548263152...

CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, pulumi, xeol, gitaly, gomplate, kaniko, kots, gitea, skaffold, pulumi-language-java, dagger, pulumi-language-yaml, trivy, flux-notification-controller, witness, nfpm, scorecard, zot, goreleaser, tfsec, flux-image-automation-controller,...

CVE-2026-14231

creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...

EUVD-2026-54740

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the WP Directory Kit WordPress plugin before 1.5.5 settings including sensitive API keys and...

CVE-2026-16590

CVE-2026-16590 affects the WP Directory Kit WordPress plugin, version prior to 1.5.5. The vulnerability stems from missing authorization or nonce checks on an authenticated AJAX action, enabling any authenticated user (e.g., a Subscriber) to retrieve stored contact messages and associated user da...

CVE-2026-16578

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...