CVE-2026-51537

creationtimestamp| type| source ---|---|--- 2026-07-09 03:36:14+00:00| seen| https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e 2026-07-14 14:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh467mk22t...

GHSA-GV7V-RGG6-548H

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...

GHSA-QCJ2-99CG-MPPF

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2141 2026-07-10 00:00:14+00:00| seen| https://t.me/brutsecurity/2141 2026-07-11 12:00:04+00:00| published-proof-of-concept| https://t.me/brutsecurity/2141 2026-07-12 00:00:50+00:00|...

CVE-2026-54780

creationtimestamp| type| source ---|---|--- 2026-07-09 01:44:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6j4hinzz2z...

CVE-2026-54775

creationtimestamp| type| source ---|---|--- 2026-07-09 01:30:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6icp4g3g27...

CVE-2026-54779

creationtimestamp| type| source ---|---|--- 2026-07-09 01:27:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6i5snv3v27...

CVE-2026-54784

creationtimestamp| type| source ---|---|--- 2026-07-09 01:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hv3t6nv2i...

CVE-2017-10678

creationtimestamp| type| source ---|---|--- 2026-07-09 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq6fdh2sxx2f...

CVE-2026-15133

creationtimestamp| type| source ---|---|--- 2026-07-09 00:34:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116887208284085207 2026-07-09 01:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hzaaw4x27 2026-07-09 04:46:08+00:00| seen|...

CVE-2026-61474: Incorrect Authorization

An improper authorization check in MISP’s attribute creation endpoint allowed an authenticated user with permission to add attributes to submit a sharinggroupid without triggering the corresponding sharing group authorization check, as long as the attribute distribution value was not explicitly s...

PT-2026-56820

Name of the Vulnerable Software and Affected Versions mettle sendportal versions prior to 3.0.2 Description A flaw in the Campaign Creation Endpoint within the file vendor/mettle/sendportal-core/src/Http/Requests/CampaignStoreRequest.php allows for a remote authorization bypass through...

CVE-2026-39245

decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write. The safeMakeDir function index.js line 29 and the extraction path validation index.js line 106 use String.indexOf to verify the resolved path is within the output...

CVE-2026-39246: Improper Link Resolution Before File Access

decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries type === 'symlink', the x.linkname field from the archive is passed directly to fs.symlink without validation index.js line 121. The preventWritingThroughSymlink check on line 98...

CVE-2026-39246

decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries type === 'symlink', the x.linkname field from the archive is passed directly to fs.symlink without validation index.js line 121. The preventWritingThroughSymlink check on line 98...

PT-2026-56788

The DHL eCommerce Benelux for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check and missing nonce verification on the create label and delete label functions in versions up to, and including, 2.2.3. These functions are...

📄 cleverange_auth 0.1.10 Denial of Service

A denial of service vulnerability exists in cleverangeauth version 0.1.10. The vulnerability is caused by the automatic generation of verification records and immediate email delivery whenever a new User object is created. Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2025-12506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain...

CVE-2026-39243

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

CVE-2026-39243: Improper Link Resolution Before File Access

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

CVE-2026-15191: Authorization Bypass Through User-Controlled Key

A flaw has been found in mettle sendportal up to 3.0.1. This vulnerability affects unknown code of the file vendor/mettle/sendportal-core/src/Http/Requests/CampaignStoreRequest.php of the component Campaign Creation Endpoint. Executing a manipulation can lead to authorization bypass. The attack c...