CVE-2015-0545

creationtimestamp| type| source ---|---|--- 2026-06-19 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monav6j4ks2f...

GHSA-RWP6-7W3Q-75FQ

creationtimestamp| type| source ---|---|--- 2026-06-19 09:41:32+00:00| seen| https://gist.github.com/alon710/ce6be6956edb730f85105a449ccea809...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-27142 DESCRIPTION: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an...

CVE-2026-9822

creationtimestamp| type| source ---|---|--- 2026-06-19 07:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momu5zpw4j2h...

CVE-2026-10735

creationtimestamp| type| source ---|---|--- 2026-06-19 07:16:13+00:00| seen| https://bsky.app/profile/ahmandonk.bsky.social/post/3momscoqoae2v 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8322 2026-07-14 00:00:43+00:00| exploited| https://t.me/truesecator/8322...

CVE-2026-4328

The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wpremoteget to fetch a user-supplied URL without validating that the URL does not point to internal or private network resources in th...

CVE-2026-54414 FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover

FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint /api/folder/uploadToSharedFolder.php, leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEXFILENAME, which permit...

CVE-2026-54414

FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint /api/folder/uploadToSharedFolder.php, leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEXFILENAME, which permit...

EUVD-2026-37984

The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wpremoteget to fetch a user-supplied URL without validating that the URL does not point to internal or private network resources in th...

CVE-2026-53854

creationtimestamp| type| source ---|---|--- 2026-06-19 04:21:14+00:00| seen| https://gist.github.com/alon710/b45b870bc10a669d4ff8530bce9819db...

CVE-2026-43994

creationtimestamp| type| source ---|---|--- 2026-06-19 03:40:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3momgbg7y4g27...

CVE-2026-6716

creationtimestamp| type| source ---|---|--- 2026-06-19 01:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7qsxmdr2m...

GHSA-6VVH-PXR4-25R7

creationtimestamp| type| source ---|---|--- 2026-06-19 01:41:43+00:00| seen| https://gist.github.com/alon710/f3e92e03dae92147bc7c79e5359c6c2b 2026-06-19 01:51:20+00:00| seen| https://gist.github.com/alon710/b1b22df575bfbbf1e201aedc3467bcba...

CVE-2026-56076

creationtimestamp| type| source ---|---|--- 2026-06-19 01:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7at33nr2r...

CVE-2026-47262

creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-07-01 19:59:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmckxbuhm2m 2026-07-02 10:29:25+00:00| seen|...

CVE-2026-50195

creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-06-19 09:11:46+00:00| seen| https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y 2026-06-19 10:03:46+00:00| seen|...

CVE-2026-8100

creationtimestamp| type| source ---|---|--- 2026-06-19 01:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom636yl5f2e...

PT-2026-51010

Name of the Vulnerable Software and Affected Versions AWX affected versions not specified Description A flaw exists in the GitHub webhook integration where the controller stores the pull request.statuses url value from a pull request webhook payload without validating if it points to a trusted...

PT-2026-51002

Name of the Vulnerable Software and Affected Versions PhpWeasyPrint versions prior to 2.6.0 Description PhpWeasyPrint is a PHP library used for generating PDFs from HTML pages or URLs. The library fetches content of option values server-side using the file get contents function when a value is...

PT-2026-51122

Name of the Vulnerable Software and Affected Versions Symfony UX Icons affected versions not specified Description The ux icon Twig function is marked as safe for HTML, which prevents Twig from escaping its output. The Icon::toHtml function inlines SVG source code directly into the page. Because...