CVE-2026-15618

creationtimestamp| type| source ---|---|--- 2026-07-14 02:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql4jvr6l227...

CVE-2026-44759

creationtimestamp| type| source ---|---|--- 2026-07-14 01:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3g6rvz52z...

CVE-2026-11802

The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration function, accessible via the wpajaxnoprivregistrationaction AJAX action, lacks any nonce verification or capability check, and...

EUVD-2026-43610

The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration function, accessible via the wpajaxnoprivregistrationaction AJAX action, lacks any nonce verification or capability check, and...

CVE-2026-57365

creationtimestamp| type| source ---|---|--- 2026-07-14 01:21:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql24xxq5326 2026-07-16 08:15:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsa2rm2x2i...

GHSA-GRP7-V8XH-RJ7H

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:06+00:00| seen| https://t.me/bdufstecru/3248 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3248 2026-08-26 11:32:18+00:00| seen| https://gist.github.com/alon710/50a574f48857c34c0cb9ded8ce78e9b5...

GHSA-GW94-85M2-X8V2

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3258 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3258...

CVE-2026-56099

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3260 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3260 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187721 2026-09-02 01:00:21+00:00|...

GHSA-4J6X-2764-M8GH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3289 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3289...

CVE-2026-44761

creationtimestamp| type| source ---|---|--- 2026-07-14 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkypxf4yz2v 2026-07-14 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116915740682728635 2026-07-14 01:30:27+00:00| seen|...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

EUVD-2026-43543

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

GHSA-3Q6Q-26VG-V97X Kimai: Improper Authorization Through Activity Creation with Preset Project Allows Creation Under Unauthorized Projects

Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity creation flow. A user with the generic createactivity permission, but without access to a target project, can still create a new Activity under that unauthorized project by visiting...

Kimai: Improper Authorization Through Activity Creation with Preset Project Allows Creation Under Unauthorized Projects

Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity creation flow. A user with the generic createactivity permission, but without access to a target project, can still create a new Activity under that unauthorized project by visiting...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the activity creation process when a user with the createactivity permission accesses the preset project creation route directly. An attacker can create new activities under unauthorized projects by specifying ...

PT-2026-60088

Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity creation flow. A user with the generic create activity permission, but without access to a target project, can still create a new Activity under that unauthorized project by visiting...

PT-2026-58940

Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity creation flow. A user with the generic create activity permission, but without access to a target project, can still create a new Activity under that unauthorized project by visiting...

PT-2026-58094

Hi.Events through v1.10.0-beta contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaScript by embedding a malicious event title containing the sequence, which is not escaped by JSON.stringify whe...

CVE-2026-60118: Missing Authorization

Hi.Events through v1.10.0-beta contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequenti...

CVE-2026-11802: Missing Authorization

The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration function, accessible via the wpajaxnoprivregistrationaction AJAX action, lacks any nonce verification or capability check, and...