CVE-2026-8609

creationtimestamp| type| source ---|---|--- 2026-07-10 22:20:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6nqxkrk2x 2026-07-11 00:17:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf5lhe6f2e...

GHSA-G936-7JQJ-MWV8

creationtimestamp| type| source ---|---|--- 2026-07-10 22:12:05+00:00| seen| https://gist.github.com/alon710/3aab1c4181e03ef1803e74b755304657...

CVE-2024-52053

creationtimestamp| type| source ---|---|--- 2026-07-10 22:07:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqd5v34qjr25...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the API location creation process when both Full Multiple Companies Support and scopelocationsfmcs are enabled. An attacker can create a child...

CVE-2026-6872

creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxpfnoro2x...

CVE-2026-53449

creationtimestamp| type| source ---|---|--- 2026-07-10 20:14:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxlbbnuh2i 2026-07-11 01:02:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhnsjwyw2w 2026-07-14 04:51:38+00:00| seen|...

CVE-2026-55472

creationtimestamp| type| source ---|---|--- 2026-07-10 20:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxdteayy2z 2026-07-11 01:02:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhp6pnjy2y 2026-07-14 04:11:02+00:00| seen|...

GHSA-7835-87Q9-RGVV

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:54+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mqcxbpjci62k 2026-09-14 14:07:33+00:00| seen| https://bsky.app/profile/bokonon.ai/post/3mvibucyh6a2t...

CVE-2026-55460

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxahqevc2l 2026-07-11 01:12:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdiailwdp2y 2026-08-28 18:35:08+00:00| published-proof-of-concept|...

CVE-2026-54070

creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66 2026-07-10 20:35:11+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w7cg-whh7-xp28...

GHSA-W7CG-WHH7-XP28

creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66...

EUVD-2026-39508

File Browser: Authentication Bypass via Proxy Auth Header Forgery...

GHSA-XQP3-JQ6G-X3QM File Browser: Authentication Bypass via Proxy Auth Header Forgery

Summary When FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server directly can impersonate any user - including admin - by sending a single forged HTTP header. No credentials are required. Additionally, specifying a...

File Browser: Authentication Bypass via Proxy Auth Header Forgery

Summary When FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server directly can impersonate any user - including admin - by sending a single forged HTTP header. No credentials are required. Additionally, specifying a...

CVE-2026-55472

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

CVE-2025-30007

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can exploit insufficient input validation in...

CVE-2026-49256

creationtimestamp| type| source ---|---|--- 2026-07-10 18:52:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcszp52g62d...

CVE-2026-22660

creationtimestamp| type| source ---|---|--- 2026-07-10 18:48:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcsrjjulo27...

CVE-2026-51119

creationtimestamp| type| source ---|---|--- 2026-07-10 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsnl6hmo2b 2026-07-10 22:43:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7wcheku2c 2026-07-11 00:51:44+00:00| seen|...

CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...