CVE-2026-28220

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

CVE-2026-53396

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd within the nfsd4createfile function. This vulnerability allows a remote attacker to cause a denial of service DoS by repeatedly triggering a memory leak of posixacl allocations. The leak occurs when a client attempts to...

CVE-2026-12080

creationtimestamp| type| source ---|---|--- 2026-07-20 14:06:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr3ho2q2t42o 2026-07-20 14:06:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116952685778778549 2026-07-20 16:05:56+00:00| seen|...

CVE-2026-64623

creationtimestamp| type| source ---|---|--- 2026-07-20 14:05:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3hmy6bbm2b...

CVE-2026-63808

creationtimestamp| type| source ---|---|--- 2026-07-20 12:51:17+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3diehsyw2w 2026-07-20 12:51:20+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3dihu6v22y 2026-08-06 04:46:55+00:00| seen|...

CVE-2026-63741

SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create arbitrary namespaces and databases by issuing USE commands, bypassing authorization checks in the RPC use method and...

CVE-2026-63741

SurrealDB vulnerable component: PRE-3.1.0 handling of DEFINE NAMESPACE/DEFINE DATABASE during USE NS/USE DB. Root cause: missing validation of permissions in the DEFINE commands allows unauthenticated actors to create arbitrary namespaces and databases, bypassing authorization checks in the RPC u...

CVE-2026-15813

creationtimestamp| type| source ---|---|--- 2026-07-20 11:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3aexvnnd23...

Exploit for CVE-2026-60137

/ / / / / / | |/ / \ / /...

CVE-2026-11349

creationtimestamp| type| source ---|---|--- 2026-07-20 08:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2uav45sm2g...

Malicious code in neroteam-v1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a87642ea3c7a291704b2306a242bb496048571efcafb63835055f0871aed19 Importing the nero package triggers nero/init.py to load nero.main, whose top-level code runs a guard routine before executing a hidden payload. guar...

CVE-2026-12724

creationtimestamp| type| source ---|---|--- 2026-07-20 07:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2sxglekj2j...

CVE-2026-13142

creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...

Path Traversal

phpMyFAQ is vulnerable to Path Traversal. The vulnerability is due to improper path validation during PDF generation, where attacker-controlled image paths are passed to filegetcontents without canonicalization or directory containment checks, allowing authenticated users to read files outside th...

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

CVE-2026-12723

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation...

CVE-2026-13699

creationtimestamp| type| source ---|---|--- 2026-07-20 05:38:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m 2026-07-20 05:38:38+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l...

CVE-2026-59674

creationtimestamp| type| source ---|---|--- 2026-07-20 04:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2i3rtydj24...

Exploit for CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...

Linux Distros Unpatched Vulnerability : CVE-2026-64119

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU...