SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding DEFINE NAMESPACE or DEFINE DATABASE permission. USE NS and USE DB automatically create the target when it does not exist. The three places USE is handled — the RPC use method,...

WordPress LatePoint – Calendar Booking Plugin for Appointments and Events plugin <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation vulnerability

Unauthenticated Insecure Direct Object Reference to Arbitrary Creation vulnerability discovered by gidget smith in WordPress Plugin LatePoint versions = 5.6.2...

WordPress JoomSport – for Sports: Team & League, Football, Hockey & more plugin <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Group Creation/Modification vulnerability discovered by ? in WordPress Plugin JoomSport versions = 5.7.8...

CVE-2026-13824

creationtimestamp| type| source ---|---|--- 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmcguh3752x 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmcgufwpg2i 2026-07-02 01:07:47+00:00| seen|...

CVE-2026-13826

creationtimestamp| type| source ---|---|--- 2026-07-01 19:46:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbtkbi3d2y 2026-07-02 07:20:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-36541

creationtimestamp| type| source ---|---|--- 2026-07-01 19:37:03+00:00| seen| https://gist.github.com/justinbrick/fad199753a9a4afbaddda05651a45d15...

CVE-2026-57155

creationtimestamp| type| source ---|---|--- 2026-07-01 18:34:11+00:00| seen| https://bsky.app/profile/bestofhn.bsky.social/post/3mpm5rz56h52r 2026-07-07 11:00:05+00:00| seen| https://bsky.app/profile/diesec.bsky.social/post/3mq2h7kpxrk2h 2026-07-09 13:06:27+00:00| seen|...

CVE-2026-7803

creationtimestamp| type| source ---|---|--- 2026-07-01 18:32:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm5pvkrcc2b 2026-07-03 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mppobh2bey22 2026-07-03 04:09:11+00:00| seen|...

CVE-2026-3602

creationtimestamp| type| source ---|---|--- 2026-07-01 18:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4hjvimt2o 2026-07-03 10:04:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcaezwlb2d...

CVE-2026-47262

CVE-2026-47262 affects containerd where a maliciously crafted image can trigger a Denial of Service by exhausting memory during container creation, causing an Out-Of-Memory (OOM) kill of the containerd process and making the runtime API unavailable (impacting clients like Docker Engine and Kubern...

CVE-2026-34104

creationtimestamp| type| source ---|---|--- 2026-07-01 17:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2ont42f27 2026-07-02 09:49:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnqwujfar2m...

CVE-2026-34102

creationtimestamp| type| source ---|---|--- 2026-07-01 17:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2gy7a572n 2026-07-02 08:26:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmd5kgjm2y 2026-07-02 09:46:35+00:00| seen|...

CVE-2026-34100

creationtimestamp| type| source ---|---|--- 2026-07-01 17:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2ab3ta22p 2026-07-02 08:28:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmfaow5r2m 2026-07-02 12:02:37+00:00| seen|...

CVE-2026-34105

creationtimestamp| type| source ---|---|--- 2026-07-01 17:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm22bzrtz2b 2026-07-02 08:28:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmfuhamx2k...

CVE-2026-24245

creationtimestamp| type| source ---|---|--- 2026-07-01 16:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26 2026-07-02 04:27:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k...

CVE-2026-7532

creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:17+00:00| seen| https://infosec.place/objects/c22b899e-0722-43cb-ba3c-e0f141edd0ce...

CVE-2026-6678

creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:12+00:00| seen| https://infosec.place/objects/cf6e553c-bb60-4c89-9f17-6f2b54a2754a...

CVE-2026-58029

creationtimestamp| type| source ---|---|--- 2026-07-01 15:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpluujzji72j 2026-07-02 02:51:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzlikquv2y 2026-07-02 04:28:51+00:00| seen|...

CVE-2026-35801

creationtimestamp| type| source ---|---|--- 2026-07-01 15:12:04+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116845361362974456 2026-07-01 15:12:59+00:00| seen| https://bsky.app/profile/netsecio.bsky.social/post/3mplskar52d2q...

CVE-2026-53905

creationtimestamp| type| source ---|---|--- 2026-07-01 13:45:19+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53902 2026-07-01 15:32:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpltnvf4z622...