CVE-2026-56699

...

CVE-2026-56699

The Wazuh Manager is vulnerable to NDJSON Injection in the inventory_sync() function within the cluster synchronization component. This occurs because the software fails to escape the DataValue.index field when constructing OpenSearch bulk requests. An attacker operating remotely can leverage thi...

PT-2026-60121

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...

CVE-2026-48322

creationtimestamp| type| source ---|---|--- 2026-07-14 23:15:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndlgi7gn24 2026-07-14 23:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndm2hgox2b 2026-07-16 04:37:06+00:00| seen|...

CVE-2026-15265

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116919187325665815 2026-07-14 16:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmjdp3ee24 2026-07-14 16:28:06+00:00| seen|...

CVE-2026-57698

creationtimestamp| type| source ---|---|--- 2026-07-14 01:36:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2xngiqm22...

CVE-2026-57800

creationtimestamp| type| source ---|---|--- 2026-07-13 22:18:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpvxla5u2d 2026-07-16 08:11:51+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqryzkfi72p...

CVE-2026-52101

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-15 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92641 2026-07-15 15:42:06+00:00| seen|...

CVE-2026-62242

creationtimestamp| type| source ---|---|--- 2026-07-13 21:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqko3zv2pr27...

Malicious Package

Overview polymarket-stake-kelly-math-check is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CERTFR-2026-CTI-004

creationtimestamp| type| source ---|---|--- 2026-07-13 09:25:58+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116911948082559856...

CVE-2026-15528

creationtimestamp| type| source ---|---|--- 2026-07-13 07:51:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj7gytgpj2e 2026-07-13 08:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15528 2026-07-13 21:23:04+00:00| seen|...

CVE-2026-15526

creationtimestamp| type| source ---|---|--- 2026-07-13 07:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj762fozp2w 2026-07-13 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15526...

CVE-2026-12397

creationtimestamp| type| source ---|---|--- 2026-07-13 07:37:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6ostdds2z...

CVE-2026-12582

creationtimestamp| type| source ---|---|--- 2026-07-13 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911494012539173 2026-07-13 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqj6cbiqal2d 2026-07-13 07:38:06+00:00| seen|...

Malicious Package

Overview tipsen-poc-again is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities KEV catalog, following reports of zero-day exploitation in the wild. The vulnerabilities, both...

CVE-2020-15892

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7083 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7083 2026-07-14 00:00:50+00:00| seen| https://t.me/pleyadesit/7083...

GHSA-6FFX-8HJJ-JHHF

creationtimestamp| type| source ---|---|--- 2026-07-12 17:21:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhotdnxkt22...

CVE-2026-15488

creationtimestamp| type| source ---|---|--- 2026-07-12 09:29:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqguiimld32z 2026-07-12 11:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3nxhwag2t...