CVE-2026-16330

creationtimestamp| type| source ---|---|--- 2026-07-21 02:53:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4sl7xhkx2x...

PT-2026-62034

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...

CVE-2026-42168

creationtimestamp| type| source ---|---|--- 2026-07-20 19:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42o37kk22a...

GHSA-6Q95-FCWC-4H44

creationtimestamp| type| source ---|---|--- 2026-07-20 15:00:03+00:00| seen| https://t.me/bdufstecru/3329 2026-07-21 00:00:38+00:00| published-proof-of-concept| https://t.me/bdufstecru/3329...

CVE-2026-53372

creationtimestamp| type| source ---|---|--- 2026-07-19 11:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqypja6fm72e...

CVE-2020-11520

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/274 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/274...

CVE-2026-8859

creationtimestamp| type| source ---|---|--- 2026-07-17 20:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulmi3kxg2e 2026-07-17 22:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqusj4xzp62g 2026-07-18 12:00:55+00:00| seen|...

CVE-2026-8396

creationtimestamp| type| source ---|---|--- 2026-07-17 13:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtvkg25eb2x 2026-07-19 12:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyq7hygfj23...

CVE-2024-23567

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...

CVE-2026-53598

creationtimestamp| type| source ---|---|--- 2026-07-16 16:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmda6exv2n...

CERTFR-2026-ALE-006

creationtimestamp| type| source ---|---|--- 2026-07-15 14:21:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116924433303774121...

CVE-2026-47301

creationtimestamp| type| source ---|---|--- 2026-07-14 20:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyqlcmbo2l 2026-07-16 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqr75ovixc2h 2026-07-16 13:51:39+00:00| seen|...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

CVE-2026-29007

creationtimestamp| type| source ---|---|--- 2026-07-11 12:01:55+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqemjtarja2n...

CVE-2026-13262

creationtimestamp| type| source ---|---|--- 2026-07-11 04:40:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdttvdzxy2y...

CVE-2026-55469

creationtimestamp| type| source ---|---|--- 2026-07-11 02:12:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdllfoczi2y...

CVE-2026-21046

creationtimestamp| type| source ---|---|--- 2026-07-10 08:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbooizzdg2k 2026-07-10 09:55:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbuyfovei27 2026-07-10 12:46:50+00:00| seen|...

UBUNTU-CVE-2026-55404

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpageurl or filename metadata without sufficient validation or escaping,...

CVE-2026-59923

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safeurl does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version...