CVE-2026-63086

The CVE-2026-63086 entry concerns text-generation-inference 3.3.7, with an SSRF flaw in the OpenAI-compatible multimodal chat completions endpoint. The fetch_image function in router/src/validation.rs does not validate addresses (private, loopback, link-local, or cloud metadata). The HTTP client ...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-12391

creationtimestamp| type| source ---|---|--- 2026-07-16 14:18:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgiqg5c22e...

CVE-2026-55805

creationtimestamp| type| source ---|---|--- 2026-07-16 13:05:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrcfgib2s2a...

CVE-2026-20187

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e 2026-07-16 16:45:11+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28...

CVE-2026-20157

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e 2026-07-16 16:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28...

CVE-2026-20158

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e 2026-07-16 16:45:04+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28...

CVE-2016-1453

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:05+00:00| seen| https://t.me/KaitNews/224 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/224...

CVE-2016-5182

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:04+00:00| seen| https://t.me/KaitNews/312 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/312...

CVE-2016-5193

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:04+00:00| seen| https://t.me/KaitNews/312 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/312...

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...

Malicious code in @hibachi-xyz/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214e1b690352ce0af70ce6a37d3b7ac4d8dec4269dc7606b7a65fbb6d4406e8b The package presents itself as 'Type definitions' for the @hibachi-xyz scope at version 99.0.0, but index.js exports an empty object and its only...

Malicious code in @hibachi-xyz/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012c3b3a43f28209edf1c4b6fdbb0477c7c31f7574e37293cf7dd324f7f1e2f On require of the package's main entry, top-level code enumerates process.env and collects values whose keys match a credential-shaped regex KEY,...

CVE-2026-13741

creationtimestamp| type| source ---|---|--- 2026-07-16 10:40:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2civkdq2x 2026-07-16 12:00:11+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqr6rcvmum27...

CVE-2026-15099

The Delicious Recipes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps' block attribute in versions up to, and including, 1.10.2. This is due to insufficient input sanitization and output escaping in the wrapdirectiontext function, which interpolates the...

CVE-2026-15458

creationtimestamp| type| source ---|---|--- 2026-07-16 08:29:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqszdqisv2m...

CVE-2026-12510

creationtimestamp| type| source ---|---|--- 2026-07-16 07:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrb5ipg22a...

CVE-2026-12492

creationtimestamp| type| source ---|---|--- 2026-07-16 07:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqobblln2c 2026-07-16 16:40:30+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrofv6bjr2j...

CVE-2026-15652

creationtimestamp| type| source ---|---|--- 2026-07-16 04:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqfljtpno2w...

CVE-2026-3842

creationtimestamp| type| source ---|---|--- 2026-07-16 04:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqfcl5gj42h 2026-07-21 21:17:46+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr6qaxfs4o2l 2026-07-21 21:17:49+00:00| seen|...