CVE-2026-44177

creationtimestamp| type| source ---|---|--- 2026-07-16 22:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsdbhwdsg2n...

CVE-2026-52869

creationtimestamp| type| source ---|---|--- 2026-07-16 20:31:08+00:00| seen| https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb 2026-08-04 06:51:03+00:00| seen| https://gist.github.com/Correctover/36ce05054d457c4fb176b23f08f9962b...

GHSA-JPW9-PFVF-9F58

creationtimestamp| type| source ---|---|--- 2026-07-16 20:31:08+00:00| seen| https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb...

GHSA-X9F9-R4M8-9XC2 ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)

ScriptTriggerExecutor sets allowedPackages to java.lang., java.util., java.time., java.math. ScriptTriggerExecutor.java:56; trigger creation is gated only at UPDATESCHEMA LocalSchema.createTrigger:636. Permitting java.lang. host-class lookup lets a trigger script do...

CVE-2026-63086

creationtimestamp| type| source ---|---|--- 2026-07-16 19:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwhp7yyy22...

CVE-2026-34212

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:31+00:00| seen| Telegram/JMPLlqAJKVKStPUctSi0425VFAAqnJlP0EBk3HwzAKEQKc 2026-07-17 00:00:47+00:00| seen| Telegram/JMPLlqAJKVKStPUctSi0425VFAAqnJlP0EBk3HwzAKEQKc 2026-07-18 04:00:03+00:00| published-proof-of-concept|...

CVE-2026-34213

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:30+00:00| seen| Telegram/JMPLlqAJKVKStPUctSi0425VFAAqnJlP0EBk3HwzAKEQKc 2026-07-17 00:00:47+00:00| seen| Telegram/JMPLlqAJKVKStPUctSi0425VFAAqnJlP0EBk3HwzAKEQKc 2026-07-18 04:00:03+00:00| published-proof-of-concept|...

CVE-2026-9090

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:21+00:00| seen| Telegram/KAYuHSInUTyY5sdHqTfJ-t-JAYNMtvmTlSN5y1liuC5CE 2026-07-17 00:00:38+00:00| seen| Telegram/KAYuHSInUTyY5sdHqTfJ-t-JAYNMtvmTlSN5y1liuC5CE 2026-07-18 00:00:22+00:00| published-proof-of-concept|...

CVE-2026-4298

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:19+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-17 00:00:36+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-18 00:00:24+00:00| published-proof-of-concept|...

CVE-2026-52614

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:07+00:00| seen| Telegram/eJTmWIryt99ubO9QtbnCAouqtws-13ZSYrG03ttlIfqzwDU 2026-07-16 19:00:08+00:00| seen| Telegram/5paqE9BZADOOkHSdC7twZCndT-XIbW43N6J0-aUcERlCO6E 2026-07-17 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-15706

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:07+00:00| seen| Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI 2026-07-17 00:00:10+00:00| published-proof-of-concept| Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI 2026-08-20 14:30:05+00:00| seen|...

CVE-2026-63087

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...

Insertion of Sensitive Information Into Sent Data

Overview @keycloak/keycloak-admin-ui is a This project is the next generation of the Keycloak Admin UI. It is written with React and PatternFly 4 and uses Vite. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through...

Insertion of Sensitive Information Into Sent Data

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through OrganizationInvitationResource.toRepresentation in...

CVE-2026-59863

creationtimestamp| type| source ---|---|--- 2026-07-16 16:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqroonmn3q2m...

CVE-2026-63087

creationtimestamp| type| source ---|---|--- 2026-07-16 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c 2026-07-16 19:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22 2026-07-17 14:00:05+00:00| published-proof-of-concept|...

CVE-2026-15352

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:39+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-03 2026-07-16 23:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsewl6cyb2e 2026-07-30 23:00:46+00:00| seen|...

CVE-2026-8312

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...

CVE-2026-8085

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gyg37xi2p 2026-07-21 08:59:19+00:00| seen|...

CVE-2026-59860

creationtimestamp| type| source ---|---|--- 2026-07-16 16:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmthsmaf2l 2026-07-24 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrftsuervb2e...