GHSA-GJX9-J8F8-7J74 JinJava Bypass through ForTag leads to Arbitrary Java Execution

Impact Vulnerability Type: Sandbox Bypass / Remote Code Execution Affected Component: Jinjava Affected Users: - Organizations using HubSpot's Jinjava template rendering engine for user-provided template content - Any system that renders untrusted Jinja templates using HubSpot's Jinjava...

CVE-2026-25547

creationtimestamp| type| source ---|---|--- 2026-02-03 17:40:52+00:00| published-proof-of-concept| https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 2026-02-06 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3me6u7cox4r2h 2026-03-19...

GHSA-FC6G-2GCP-2QRQ

creationtimestamp| type| source ---|---|--- 2026-02-03 17:40:05+00:00| seen| https://gist.github.com/alon710/4c9483a1ae63cde824ec94a73e4b4ee0...

CVE-2025-13292

creationtimestamp| type| source ---|---|--- 2026-02-03 17:33:46+00:00| seen| https://bsky.app/profile/google-bot.bsky.social/post/3mdxvfq5l342w 2026-09-14 11:07:04+00:00| seen| https://bsky.app/profile/google.xmirror.bot/post/3mvhxrkz6ym2z...

CVE-2025-13473

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-05 22:09:24+00:00| seen|...

CVE-2026-1312

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-13 00:46:46+00:00| seen|...

CVE-2026-1285

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-03 17:23:21+00:00| seen|...

CVE-2025-39960

creationtimestamp| type| source ---|---|--- 2026-02-03 15:19:23+00:00| seen| Telegram/Rw2VEj8L8tjI7X6Of5IUhVsj5tIIZw2fSQd5dgDl5gBXDRw...

CVE-2025-7760

creationtimestamp| type| source ---|---|--- 2026-02-03 13:17:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxh4462lx2g...

CVE-2025-67849

creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...

CVE-2025-67850

creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...

CVE-2025-67853

creationtimestamp| type| source ---|---|--- 2026-02-03 11:23:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxaot376d2m...

CVE-2025-59902

creationtimestamp| type| source ---|---|--- 2026-02-03 11:16:16+00:00| seen| Telegram/5v7a4Pbi9U1CMbf76tYHiAUJARPS3oFvKnOwO3ZDIa4vGns...

CVE-2026-25513

creationtimestamp| type| source ---|---|--- 2026-02-03 10:32:58+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-cjfx-qhwm-hf99...

CVE-2026-21862

creationtimestamp| type| source ---|---|--- 2026-02-03 10:12:24+00:00| published-proof-of-concept| https://github.com/rustfs/rustfs/security/advisories/GHSA-fc6g-2gcp-2qrq 2026-02-03 17:40:05+00:00| seen| https://gist.github.com/alon710/4c9483a1ae63cde824ec94a73e4b4ee0...

CVE-2026-1065

creationtimestamp| type| source ---|---|--- 2026-02-03 09:17:08+00:00| seen| Telegram/FqzbYeVrA83bKBXihn9RsWwSkEuF36kvwdGphoUN0o5eRo...

CVE-2026-0617

creationtimestamp| type| source ---|---|--- 2026-02-03 09:17:08+00:00| seen| Telegram/FqzbYeVrA83bKBXihn9RsWwSkEuF36kvwdGphoUN0o5eRo...

GHSA-MC68-Q9JW-2H3V

creationtimestamp| type| source ---|---|--- 2026-02-03 08:50:51+00:00| seen| https://gist.github.com/alon710/da71e1b21c019ed67ddac780407f1bdf...

CVE-2025-8589

creationtimestamp| type| source ---|---|--- 2026-02-03 08:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdwwds6yye24 2026-02-03 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdwweidlsp23...

WordPress Message Filter for Contact Form 7 plugin <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation vulnerability

Missing Authorization to Authenticated Subscriber+ New Filter Creation vulnerability discovered by Tieu Pham Trong Nhan - TechlabCorp in WordPress Plugin Message Filter for Contact Form 7 versions = 1.6.3...