CVE-2026-48093 Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed

The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...

CVE-2026-43622

creationtimestamp| type| source ---|---|--- 2026-08-06 16:22:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/detkkxrgg2ojd 2026-08-06 19:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgpzhgv6y2n...

CVE-2026-53985

creationtimestamp| type| source ---|---|--- 2026-08-06 16:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fddtrz4hv643 2026-08-06 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjear6dd2n...

CVE-2026-15656 IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

CVE-2025-14469

creationtimestamp| type| source ---|---|--- 2026-08-01 17:07:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxfsnjdi2x 2026-08-01 17:08:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxgj4qb22b...

CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...

CVE-2026-17543

creationtimestamp| type| source ---|---|--- 2026-07-30 12:11:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcuw5bgc4gwsk 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...

Protection Mechanism Failure

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Protection Mechanism Failure through improper matching of hostnames in the WEBFETCHFILTERLIST process. An attacker can access hosts that should be blocked or bypass allowlists by crafting URLs with specific...

CVE-2026-12981

creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...

CVE-2026-57859

creationtimestamp| type| source ---|---|--- 2026-07-20 23:39:51+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f 2026-07-21 00:00:00+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f...

CVE-2026-61424

creationtimestamp| type| source ---|---|--- 2026-07-20 19:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42vbmbff2u 2026-07-20 21:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4agkeocy2q 2026-07-30 22:00:03+00:00| seen|...

CVE-2026-44023 Docling Core has unsafe remote filename resolution

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...

CVE-2026-46512

creationtimestamp| type| source ---|---|--- 2026-07-16 18:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrushsg2x 2026-07-16 19:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqryvgoskh2u...

CVE-2026-15143

creationtimestamp| type| source ---|---|--- 2026-07-10 16:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjgg6g4b26 2026-07-10 16:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclx3547y2b 2026-07-10 22:19:41+00:00| seen|...

CVE-2026-57054 Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. If an MX Series device is...

CVE-2026-14245

creationtimestamp| type| source ---|---|--- 2026-07-09 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116889198686002131 2026-07-09 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq7bhkabxp24 2026-07-09 22:30:57+00:00| seen|...

GO-2026-5681 Hugo: security.http.urls allow-list bypass via HTTP redirects in github.com/gohugoio/hugo

Hugo: security.http.urls allow-list bypass via HTTP redirects in github.com/gohugoio/hugo...

CVE-2026-34037

creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpzpxpr5wr2h 2026-07-07 04:21:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqxmsj2d2u 2026-07-07 04:30:26+00:00| seen|...

CVE-2026-5137

creationtimestamp| type| source ---|---|--- 2026-07-03 23:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprohzoe242j 2026-07-03 23:46:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprq5zrrvf2f 2026-07-03 23:46:22+00:00| seen|...

CVE-2026-14076

creationtimestamp| type| source ---|---|--- 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvunbqlz22 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvun6jo72s 2026-07-02 07:51:36+00:00| seen|...