EUVD-2026-54908

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

CVE-2026-16992

CVE-2026-16992 affects the WordPress plugin “Create by Mediavine”

EUVD-2026-54869

A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component runopenlane/viewwaveform. The manipulation of the argument designname/vcdfile leads to command injection. Local access is required to approach this...

CVE-2026-71992

creationtimestamp| type| source ---|---|--- 2026-08-09 03:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117063314524225568 2026-08-09 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msmlsamc5x24...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-71988

creationtimestamp| type| source ---|---|--- 2026-08-09 02:02:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmihftfgd2y 2026-08-09 09:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msn7vxua2v2k...

CVE-2026-19325

IncomeStreamSurfer roo-code-memory-bank-mcp-server exposes a local path traversal in read_memory_bank_file/append_memory_bank_entry (readMemoryBankFile/appendMemoryBankEntry) affecting src/index.ts. The attack hinges on manipulating file_name to traverse directories. Details in CVE-2026-19325 ind...

CVE-2023-30000

creationtimestamp| type| source ---|---|--- 2026-08-09 01:19:36+00:00| published-proof-of-concept| Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli9yVwlxO3uxT68v6BA...

CVE-2026-71989

creationtimestamp| type| source ---|---|--- 2026-08-09 00:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcmex6mq2z...

EUVD-2026-54836

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

CVE-2026-18988

creationtimestamp| type| source ---|---|--- 2026-08-08 21:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslykpomvr2a...

CVE-2026-71957

creationtimestamp| type| source ---|---|--- 2026-08-08 18:08:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslnwrthta2v...

CVE-2026-20346

creationtimestamp| type| source ---|---|--- 2026-08-08 15:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117060495821023885 2026-08-10 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...

CVE-2026-19195

creationtimestamp| type| source ---|---|--- 2026-08-08 12:06:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059799868254552 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97246 2026-08-09 14:02:14+00:00| published-proof-of-concept|...

Exploit for CVE-2026-64638

💥 CVE‑2026‑64638 – WordPress XSS2Shell S...

CVE-2026-66060

creationtimestamp| type| source ---|---|--- 2026-08-08 11:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059546548263152...

CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gitsign, guac, src-fingerprint, dagger, flux-notification-controller, goreleaser, nfpm, snyk-cli, kots, act, pulumi-language-yaml, steampipe, zot, external-secrets-operator, argo-events, tfsec, argocd-image-updater, gitaly, flux-image-automation-controller, k9s,...

CVE-2026-14231

creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...

EUVD-2026-54740

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the WP Directory Kit WordPress plugin before 1.5.5 settings including sensitive API keys and...