CVE-2026-13152

creationtimestamp| type| source ---|---|--- 2026-08-01 07:00:04+00:00| seen| https://t.me/GithubRedTeam/96105 2026-08-01 10:00:03+00:00| seen| Telegram/cim9FqsdIIG77VgS8PjeqDT3oIZOc5lo17f7LtNx9kniUA 2026-08-01 10:00:03+00:00| seen| Telegram/qAspjE1L-VVREGyDK8YlPzODJIxdxXtpgp2Eql6QlgFrVPg 2026-08-...

CVE-2026-14561

The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...

CVE-2026-13729

CVE-2026-13729 concerns the Podlove Podcast Publisher WordPress plugin, affected in versions before 4.5.3. The vulnerability arises because the plugin does not perform nonce validation on some administrative create and delete actions, enabling a forged request (CSRF). This can allow an attacker t...

CVE-2026-62999

creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l 2026-08-01 00:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999...

kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CVE-2026-17347

creationtimestamp| type| source ---|---|--- 2026-07-31 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgl4s7yf2a 2026-08-01 09:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz73zqg4s2m 2026-08-01 09:53:08+00:00| seen|...

CVE-2026-27060

creationtimestamp| type| source ---|---|--- 2026-07-31 15:44:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxcbkstiw2u 2026-07-31 17:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxiy5imiu2q...

CVE-2026-17561

creationtimestamp| type| source ---|---|--- 2026-07-31 13:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrx3hcpzko2e 2026-07-31 14:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4itkdeb2o 2026-08-01 03:00:29+00:00| seen|...

EUVD-2025-210568

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

CVE-2026-62391

creationtimestamp| type| source ---|---|--- 2026-07-31 11:36:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2...

CVE-2026-63222

creationtimestamp| type| source ---|---|--- 2026-07-31 11:00:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrwsfzyslz2z...

CVE-2026-65311

creationtimestamp| type| source ---|---|--- 2026-07-31 10:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dabbdkvhdeq2o...

CVE-2026-63221

creationtimestamp| type| source ---|---|--- 2026-07-31 06:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwcnfh5zx2y 2026-07-31 07:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/es6x4hg2ubacn...

rConfig 3.9 - Authentication Bypass(Admin Login)

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7. id: CVE-2020-13638 info: name: rConfig 3.9 - Authentication BypassAdmin Login author: theamanrawat severity: critical description: |...

CVE-2026-43832

creationtimestamp| type| source ---|---|--- 2026-07-31 05:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7fos4ox2e 2026-08-02 20:02:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4rjom5i62b...

CVE-2026-43829

creationtimestamp| type| source ---|---|--- 2026-07-31 05:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7c4bk3p2e 2026-08-02 21:02:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4uuzsh4t2g...

CVE-2026-51274

creationtimestamp| type| source ---|---|--- 2026-07-31 04:03:33+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrw34u4xo32i...

CVE-2026-51245

creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...

CVE-2026-55495 Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUTRELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a filename, allowing slash and dot-dot segments to escape the source file directory and create or conditionally overwrite...