CVE-2026-15813

creationtimestamp| type| source ---|---|--- 2026-07-20 11:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3aexvnnd23...

Exploit for CVE-2026-60137

/ / / / / / | |/ / \ / /...

CVE-2026-11349

creationtimestamp| type| source ---|---|--- 2026-07-20 08:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2uav45sm2g...

Malicious code in neroteam-v1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a87642ea3c7a291704b2306a242bb496048571efcafb63835055f0871aed19 Importing the nero package triggers nero/init.py to load nero.main, whose top-level code runs a guard routine before executing a hidden payload. guar...

CVE-2026-12724

creationtimestamp| type| source ---|---|--- 2026-07-20 07:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2sxglekj2j...

CVE-2026-13142

creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...

Path Traversal

phpMyFAQ is vulnerable to Path Traversal. The vulnerability is due to improper path validation during PDF generation, where attacker-controlled image paths are passed to filegetcontents without canonicalization or directory containment checks, allowing authenticated users to read files outside th...

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

CVE-2026-12723

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation...

CVE-2026-13699

creationtimestamp| type| source ---|---|--- 2026-07-20 05:38:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m 2026-07-20 05:38:38+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l...

CVE-2026-59674

creationtimestamp| type| source ---|---|--- 2026-07-20 04:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2i3rtydj24...

Exploit for CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...

CVE-2026-12898: Improper Limitation of a Pathname to a Restricted Directory

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

CVE-2026-44585: Authorization Bypass Through User-Controlled Key

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

Linux Distros Unpatched Vulnerability : CVE-2026-64119

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU...

Studio 5000 Logix Designer Path Traversal Code Execution

The vulnerability of the integrated design environment of Studio 5000 Logix Designer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to file creation and execute arbitrary code by sending a speciall...

GHSA-CFCQ-76GR-62X8

creationtimestamp| type| source ---|---|--- 2026-07-19 21:03:21+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mqzojds3zg2g...

CVE-2026-12484

creationtimestamp| type| source ---|---|--- 2026-07-19 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqzoeigsm42w 2026-07-19 21:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27 2026-07-19 22:00:39+00:00| seen|...

CVE-2026-64178

creationtimestamp| type| source ---|---|--- 2026-07-19 18:45:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzgsinfn62i 2026-08-03 09:19:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803 2026-10-01 18:00:00+00:00| seen...

CVE-2026-64179

creationtimestamp| type| source ---|---|--- 2026-07-19 18:30:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzfxn6fxz24 2026-08-03 10:18:22+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803 2026-10-01 18:00:00+00:00| seen...