CVE-2026-57669

creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...

GHSA-52JP-GJ8W-J6XH

creationtimestamp| type| source ---|---|--- 2026-07-31 04:31:56+00:00| seen| https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62...

CVE-2026-55495

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUTRELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a filename, allowing slash and dot-dot segments to escape the source file directory and create or conditionally overwrite...

CVE-2026-6890

creationtimestamp| type| source ---|---|--- 2026-07-31 04:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/75upzhvzgudry...

CVE-2026-51274

creationtimestamp| type| source ---|---|--- 2026-07-31 04:03:33+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrw34u4xo32i...

CVE-2026-18157

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrw2xsw67y2o 2026-07-31 04:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/htuiez2lpkio5...

CVE-2026-14540

creationtimestamp| type| source ---|---|--- 2026-07-31 03:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt 2026-07-31 12:48:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724 2026-08-01 04:58:43+00:00| seen|...

CVE-2026-51245

creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...

GHSA-H669-8M4G-R2HC

creationtimestamp| type| source ---|---|--- 2026-07-31 03:34:09+00:00| seen| https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f...

CVE-2026-51243

creationtimestamp| type| source ---|---|--- 2026-07-31 03:26:49+00:00| seen| https://gist.github.com/programmervuln/93176789b1e5b46d8aba1038a7d797d9...

GHSA-5P9G-J988-PCWV

creationtimestamp| type| source ---|---|--- 2026-07-31 02:31:09+00:00| seen| https://gist.github.com/alon710/eb7bbb63a594430d7d6ab18e1b915ebd...

GHSA-4JC5-G844-4X33

creationtimestamp| type| source ---|---|--- 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...

CVE-2026-66420

creationtimestamp| type| source ---|---|--- 2026-07-31 01:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqvtqxt22a 2026-07-31 12:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwy427mt52i...

CVE-2026-51270

creationtimestamp| type| source ---|---|--- 2026-07-31 00:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrvnlus5te2e...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

Google Chrome Navigation Unauthorized Access

The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2026-66706

Name of the Vulnerable Software and Affected Versions ShopMonitor.io versions prior to 1.2.0 Description The plugin fails to properly restrict its email-rerouting test mode, relying on a trusted-source check that can be bypassed using client-supplied request headers. This allows unauthenticated...

PT-2026-66836

Name of the Vulnerable Software and Affected Versions Thumbor versions prior to 7.8.0 Description The ALLOWED SOURCES configuration, designed to restrict the hosts from which the HTTP loader fetches images, fails to escape dots when processing plain-string entries. These strings are passed direct...

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale

The Model Context Protocol MCP has seen rapid adoption since its November 2024 launch, with over 21,000 server instances detectable on the public internet. We present the first dynamic behavioral security assessment of internet-facing MCP servers, combining passive discovery across eleven data...

GitLab 16.6 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6336)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthoriz...