PT-2026-48991

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.31.0 Description When the prettyUrls: true setting is enabled on the @apostrophecms/file module, the public pretty-URL handler constructs an upstream URL using the raw Host HTTP request header. This URL is the...

PT-2026-48868

Name of the Vulnerable Software and Affected Versions @nuxt/rspack-builder versions 3.15.4 through 3.21.6 @nuxt/rspack-builder versions 4.0.0 through 4.4.6 @nuxt/webpack-builder versions 3.15.4 through 3.21.6 @nuxt/webpack-builder versions 4.0.0 through 4.4.6 Description An incomplete fix in the...

PT-2026-48964

Name of the Vulnerable Software and Affected Versions Actual versions prior to 26.5.0 Description Several endpoints in this open-source personal finance application are affected by path traversal, a condition where an attacker can access files and directories that are stored outside the web root...

CVE-2026-53510

creationtimestamp| type| source ---|---|--- 2026-06-11 23:20:00+00:00| seen| https://bsky.app/profile/connorshea.bsky.social/post/3mo2egnpf5s2u 2026-07-31 21:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtx6byfe2g 2026-07-31 21:49:24+00:00| seen|...

CVE-2026-39494

creationtimestamp| type| source ---|---|--- 2026-06-11 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2dehgvm22n 2026-06-12 01:22:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2lbirsuf23 2026-06-12 09:00:31+00:00| seen|...

CVE-2026-49060

creationtimestamp| type| source ---|---|--- 2026-06-11 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2deabi7m2b 2026-06-12 01:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2lgfb72j2g...

EUVD-2026-36370

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 141, ClipBucket v5 contains an improper neutralization of SQL wildcard characters in the subtitle editing endpoint. An authenticated user can send a % character as the number parameter to overwrite all subtitle title...

CVE-2026-49482 ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 141, ClipBucket v5 contains an improper neutralization of SQL wildcard characters in the subtitle editing endpoint. An authenticated user can send a % character as the number parameter to overwrite all subtitle title...

CVE-2026-49973

creationtimestamp| type| source ---|---|--- 2026-06-11 22:42:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2cdqxxsm2g 2026-06-11 23:04:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo2dledkjf23 2026-06-15 00:01:40+00:00| seen|...

CVE-2026-53817

creationtimestamp| type| source ---|---|--- 2026-06-11 22:32:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2brtocbo2g 2026-06-14 16:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mob5bd4nws2d...

CVE-2026-34693

creationtimestamp| type| source ---|---|--- 2026-06-11 22:23:20+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mo2bberyxr2g 2026-06-12 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2zizgsmd2y...

CVE-2026-45175

creationtimestamp| type| source ---|---|--- 2026-06-11 22:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2b2ibw7o23...

CVE-2026-34694

creationtimestamp| type| source ---|---|--- 2026-06-11 22:18:15+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mo2aybw3qi2d...

CVE-2026-53815

creationtimestamp| type| source ---|---|--- 2026-06-11 22:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2auhvlac2t...

CVE-2026-53812

creationtimestamp| type| source ---|---|--- 2026-06-11 22:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2ap2utjj23 2026-06-14 15:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moazvwvogl2d...

CVE-2026-53816

creationtimestamp| type| source ---|---|--- 2026-06-11 22:07:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2afnrmep23...

CVE-2026-53813

creationtimestamp| type| source ---|---|--- 2026-06-11 22:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2a5n7kl72o 2026-06-14 15:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moazw5uzcb2a...

CVE-2026-53818

creationtimestamp| type| source ---|---|--- 2026-06-11 21:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo27sutc2u2g...

CVE-2026-45802

creationtimestamp| type| source ---|---|--- 2026-06-11 21:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo27jwcmmd2m...

CVE-2026-46622

creationtimestamp| type| source ---|---|--- 2026-06-11 21:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo26xyzixc2d 2026-06-15 01:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3io7van2x...