CVE-2026-15927

creationtimestamp| type| source ---|---|--- 2026-07-21 10:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5mblx7vf23...

CVE-2026-63770

creationtimestamp| type| source ---|---|--- 2026-07-20 21:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bkfaom222...

CVE-2026-56623

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr46seddce2x 2026-07-20 21:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bwrjqod2q...

CVE-2026-41521

creationtimestamp| type| source ---|---|--- 2026-07-20 20:54:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46icr4di2a 2026-07-23 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrciecdpch2l...

CVE-2026-64190

creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3w3ubzed22...

CVE-2026-44227 RT: Reflected Cross-Site Scripting via URL parameters

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

CVE-2026-44227 RT: Reflected Cross-Site Scripting via URL parameters

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

CERTFR-2026-ALE-007

creationtimestamp| type| source ---|---|--- 2026-07-20 08:52:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116951452309188132...

CVE-2026-13147 Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis

The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts Server-Side Request Forgery...

PT-2026-61587

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...

CVE-2026-16211

creationtimestamp| type| source ---|---|--- 2026-07-19 08:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b...

CVE-2026-16133

creationtimestamp| type| source ---|---|--- 2026-07-18 20:19:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqx3moyuxa2q...

CVE-2026-50274

creationtimestamp| type| source ---|---|--- 2026-07-18 05:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvicwsojf2f 2026-07-19 14:01:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqywwbtptl2t 2026-07-19 14:01:07+00:00| seen|...

PT-2026-60974

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1 Description An issue exists in the http request component within the file claw/tools/tool net.c. Remote manipulation of the url variable passed to the claw net get and claw net post functions allows for...

CVE-2026-8635

creationtimestamp| type| source ---|---|--- 2026-07-17 20:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulmgjig62e 2026-07-17 22:26:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqusa6knt62e 2026-07-18 11:01:02+00:00| seen|...

CVE-2026-15093

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs...

EUVD-2026-45299

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs...

CVE-2026-15093 Multiple Vulnerabilities in IBM Engineering AI hub.

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs...

CVE-2026-15322

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs...

CVE-2026-15322

CVE-2026-15322 affects IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0, where session tokens exposed in URLs could allow a remote attacker to obtain sensitive information. The IBM Security Bulletin confirms this issue under CVE-2026-15322 and states remediation is available in IBM Enginee...