GHSA-XC5W-4V5W-7X65

creationtimestamp| type| source ---|---|--- 2026-07-31 08:32:20+00:00| seen| https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11...

CVE-2026-18214

creationtimestamp| type| source ---|---|--- 2026-07-31 08:17:11+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrwjcekyhw2z...

CVE-2026-16236

creationtimestamp| type| source ---|---|--- 2026-07-31 08:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/73yfkyntgsmwp 2026-07-31 23:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mry2rlharq2i...

Rocket.Chat v8.7.0-rc.3

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

GHSA-RJR6-RCGV-9M7M

creationtimestamp| type| source ---|---|--- 2026-07-31 07:31:41+00:00| seen| https://gist.github.com/alon710/f097a8ec4fd3160f0611d4f0d84400e7...

CVE-2026-18452

creationtimestamp| type| source ---|---|--- 2026-07-31 07:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwg4aowwe2k 2026-07-31 08:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6elztljrmbc4t...

CVE-2026-18452

DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...

CVE-2026-65616

creationtimestamp| type| source ---|---|--- 2026-07-31 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwdpgbz3b2c 2026-09-13 14:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 00:00:13+00:00| published-proof-of-concept|...

netbox v4.6.7

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2026-63223

creationtimestamp| type| source ---|---|--- 2026-07-31 06:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwcngx6kp2e 2026-07-31 07:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d3wahrnexyoi5 2026-07-31 09:19:42+00:00| seen|...

CVE-2026-63221

creationtimestamp| type| source ---|---|--- 2026-07-31 06:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwcnfh5zx2y 2026-07-31 07:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/es6x4hg2ubacn 2026-08-08 05:33:08+00:00| seen|...

EUVD-2026-51440

The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with client-supplied request headers, allowing unauthenticated attackers to redirect outgoing emails, including the WordPress...

CVE-2026-14919

The ShopMonitor.io WordPress plugin, in versions before 1.2.0 , is vulnerable to an unauthenticated administrator account takeover . The root cause is an improperly restricted email-rerouting test mode that relies on a trusted-source check satisfiable via client-supplied request headers . This fl...

GHSA-RCR6-4JQH-J84M

creationtimestamp| type| source ---|---|--- 2026-07-31 06:00:03+00:00| seen| https://t.me/cyberwarehouse/1178 2026-08-01 00:00:39+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/1178 2026-09-02 06:00:05+00:00| seen| https://t.me/HackingTeamGrupoOfficial/48243 2026-09-03...

EUVD-2026-51406

DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...

CVE-2026-18452 Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials

DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...

CVE-2026-18452

CVE-2026-18452 affects DMS+ (Non-Mobile) by Rich Source and is due to use of hard-coded credentials (a fixed API key). Unauthenticated remote attackers can exploit this to gain control over all installed DMS+ devices. The provided metrics indicate a critical impact (CVSS v4.0 10.0; CVSS v3.1 10.0...

CVE-2026-18452

DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...

GHSA-7683-3W9X-CH42

creationtimestamp| type| source ---|---|--- 2026-07-31 05:31:42+00:00| seen| https://gist.github.com/alon710/14986c8aa9f0de6cc9812b6e85b52624...

CVE-2026-43832

creationtimestamp| type| source ---|---|--- 2026-07-31 05:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7fos4ox2e 2026-08-02 20:02:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4rjom5i62b...