BIT-NEXTCLOUD-2023-49790 App PIN code can be bypassed in Nextcloud Files iOS

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workaroun...

CVE-2026-15510

creationtimestamp| type| source ---|---|--- 2026-07-12 23:35:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqidqncgq226 2026-07-12 23:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiefc2vp526 2026-07-13 03:15:05+00:00| seen|...

CVE-2026-15509

creationtimestamp| type| source ---|---|--- 2026-07-12 23:30:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqidht6uyw2y 2026-07-13 00:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqifj3uwyz27 2026-07-13 03:15:07+00:00| seen|...

MINI-2CFR-M63R-XVXQ

Bulletin has no description...

CVE-2020-6110

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6631 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6631 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6631 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/182...

CVE-2020-6109

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6631 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6631 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6631...

GHSA-H856-FFVV-XVR4

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:10+00:00| seen| https://t.me/securixykz/959 2026-07-13 00:00:34+00:00| seen| https://t.me/securixykz/959 2026-07-14 00:00:59+00:00| published-proof-of-concept| https://t.me/securixykz/959...

GHSA-R389-865G-HCG3

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:09+00:00| seen| https://t.me/securixykz/1030 2026-07-13 00:00:34+00:00| seen| https://t.me/securixykz/1030 2026-07-14 00:01:00+00:00| seen| https://t.me/securixykz/1030...

GHSA-RR6P-3PFG-562J

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:07+00:00| seen| https://t.me/securixykz/1121 2026-07-13 00:00:18+00:00| seen| https://t.me/securixykz/1121 2026-07-14 00:01:01+00:00| published-proof-of-concept| https://t.me/securixykz/1121...

GHSA-C8CC-PHH7-XMXR

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1231 2026-07-13 00:00:17+00:00| seen| https://t.me/securixykz/1231 2026-07-14 00:01:03+00:00| published-proof-of-concept| https://t.me/securixykz/1231 2026-08-04 13:00:21+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-56241

creationtimestamp| type| source ---|---|--- 2026-07-12 12:36:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6wgwogn2i 2026-07-12 12:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh7l7ob2b26 2026-07-12 14:01:25+00:00| seen|...

CVE-2026-56238

creationtimestamp| type| source ---|---|--- 2026-07-12 12:31:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6ohgm362f 2026-07-12 13:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhbrsqsvs2x 2026-07-12 14:01:17+00:00| seen|...

WordPress گرویتی فرم فارسی plugin <= 3.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin گرویتی فرم فارسی versions = 3.0.2...

CVE-2026-15496

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15496

SonicCloudOrg sonic-agent (up to version 2.7.2) contains a remote os command injection in GroovyScriptImpl.evalIsFailed within Groovy Script Handler. The vulnerable function is in sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java. Exploitation is public and report...

CVE-2026-15496 SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15491

creationtimestamp| type| source ---|---|--- 2026-07-12 10:52:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgz54lmy52e 2026-07-12 12:01:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqh4xlxwyb2v...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15488

creationtimestamp| type| source ---|---|--- 2026-07-12 09:29:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqguiimld32z 2026-07-12 11:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3nxhwag2t...