CVE-2026-50289

creationtimestamp| type| source ---|---|--- 2026-07-16 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpx3jzg5o2p 2026-07-16 00:35:08+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839...

CVE-2026-54450

creationtimestamp| type| source ---|---|--- 2026-07-15 22:35:03+00:00| published-proof-of-concept| https://github.com/stacklok/toolhive/security/advisories/GHSA-pph6-vfjv-vpjw...

CVE-2026-54494

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:03+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-rjg7-r26h-cfp2...

CVE-2026-54491

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:12+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-6qvr-wjmv-v8mm...

CVE-2026-54492

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:09+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-w79m-f3jx-779v...

CVE-2026-54493

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:07+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-6p96-cfg5-4vhp...

CVE-2026-54451

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:03+00:00| published-proof-of-concept| https://github.com/elixir-protobuf/protobuf/security/advisories/GHSA-rv48-qqj5-crxg...

CVE-2026-61699

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:16+00:00| published-proof-of-concept| https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-cm26-5974-52h8...

CVE-2026-54628

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:13+00:00| published-proof-of-concept| https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv...

CVE-2026-44891

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:11+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-vhch-2wf3-m8rp 2026-07-18 09:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvo6d5ep2j...

CVE-2026-54629

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:09+00:00| published-proof-of-concept| https://github.com/julien040/anyquery/security/advisories/GHSA-mf78-3rpf-r784...

CVE-2026-55512

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:07+00:00| published-proof-of-concept| https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-m3cx-mwpg-32jg...

CVE-2026-55513

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:04+00:00| published-proof-of-concept| https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-g4x6-jcvr-9m3g...

CVE-2026-54446

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:02+00:00| published-proof-of-concept| https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-x9vc-9ffq-p3gj...

CVE-2026-50013

creationtimestamp| type| source ---|---|--- 2026-07-14 20:35:13+00:00| published-proof-of-concept| https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-qrh4-p6v4-mrfg...

CVE-2026-50018

creationtimestamp| type| source ---|---|--- 2026-07-14 20:35:11+00:00| published-proof-of-concept| https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-42j2-w334-qxw7...

CVE-2026-50125

creationtimestamp| type| source ---|---|--- 2026-07-14 20:35:09+00:00| published-proof-of-concept| https://github.com/StacklokLabs/mkp/security/advisories/GHSA-qw5r-ppcg-f8rj...

CVE-2026-50006

creationtimestamp| type| source ---|---|--- 2026-07-14 20:35:04+00:00| published-proof-of-concept| https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx 2026-07-14 22:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7shrlbn2b...

CVE-2026-50158

creationtimestamp| type| source ---|---|--- 2026-07-14 20:35:02+00:00| published-proof-of-concept| https://github.com/eat-pray-ai/yutu/security/advisories/GHSA-2c7f-fxww-6w6c...

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

Summary Anyquery's server mode lacks input sanitization and access control over its built-in SQLite virtual table modules e.g., csvreader, logreader. Unauthenticated attackers connecting to the MySQL-compatible server port can create virtual tables pointing to local files on the system e.g.,...