58578 matches found
CVE-2026-63741
SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create arbitrary namespaces and databases by issuing USE commands, bypassing authorization checks in the RPC use method and...
CVE-2026-63741
SurrealDB vulnerable component: PRE-3.1.0 handling of DEFINE NAMESPACE/DEFINE DATABASE during USE NS/USE DB. Root cause: missing validation of permissions in the DEFINE commands allows unauthenticated actors to create arbitrary namespaces and databases, bypassing authorization checks in the RPC u...
CVE-2026-15813
creationtimestamp| type| source ---|---|--- 2026-07-20 11:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3aexvnnd23...
Exploit for CVE-2026-60137
/ / / / / / | |/ / \ / /...
CVE-2026-11349
creationtimestamp| type| source ---|---|--- 2026-07-20 08:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2uav45sm2g...
Malicious code in neroteam-v1 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a87642ea3c7a291704b2306a242bb496048571efcafb63835055f0871aed19 Importing the nero package triggers nero/init.py to load nero.main, whose top-level code runs a guard routine before executing a hidden payload. guar...
CVE-2026-12724
creationtimestamp| type| source ---|---|--- 2026-07-20 07:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2sxglekj2j...
CVE-2026-13142
creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...
Path Traversal
phpMyFAQ is vulnerable to Path Traversal. The vulnerability is due to improper path validation during PDF generation, where attacker-controlled image paths are passed to filegetcontents without canonicalization or directory containment checks, allowing authenticated users to read files outside th...
CVE-2026-12898
The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...
CVE-2026-12723
The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation...
CVE-2026-13699
creationtimestamp| type| source ---|---|--- 2026-07-20 05:38:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m 2026-07-20 05:38:38+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l...
CVE-2026-59674
creationtimestamp| type| source ---|---|--- 2026-07-20 04:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2i3rtydj24...
Exploit for CVE-2026-63030
CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...
Linux Distros Unpatched Vulnerability : CVE-2026-64119
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU...
GHSA-CFCQ-76GR-62X8
creationtimestamp| type| source ---|---|--- 2026-07-19 21:03:21+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mqzojds3zg2g...
CVE-2026-12484
creationtimestamp| type| source ---|---|--- 2026-07-19 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqzoeigsm42w 2026-07-19 21:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27 2026-07-19 22:00:39+00:00| seen|...
CVE-2026-64178
creationtimestamp| type| source ---|---|--- 2026-07-19 18:45:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzgsinfn62i 2026-08-03 09:19:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...
CVE-2026-64179
creationtimestamp| type| source ---|---|--- 2026-07-19 18:30:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzfxn6fxz24 2026-08-03 10:18:22+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...