CVE-2026-9189

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:25+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mojguhyudr2s 2026-06-19 00:54:32+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mom4y6nw622s 2026-09-01 20:00:07+00:00| seen|...

CVE-2026-39560

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mojgufnwu72s...

CVE-2026-54388

creationtimestamp| type| source ---|---|--- 2026-06-17 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...

CVE-2026-48823

creationtimestamp| type| source ---|---|--- 2026-06-17 22:43:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf6h6akq2f...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357

CVE-2026-45357 — LiquidJS date filter (strftime) DoS via unbounded width padding . In LiquidJS

EUVD-2026-37827

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-30802

creationtimestamp| type| source ---|---|--- 2026-06-17 21:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojam2yhus2f...

EUVD-2026-37558

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...

CVE-2026-6734

creationtimestamp| type| source ---|---|--- 2026-06-17 16:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g 2026-06-18 15:59:03+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x 2026-06-19 05:12:21+00:00| seen|...

CVE-2026-9675

creationtimestamp| type| source ---|---|--- 2026-06-17 16:24:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipzi2kmc2g 2026-06-17 19:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyr2plnu2x 2026-06-18 15:59:02+00:00| seen|...

CVE-2024-37210

creationtimestamp| type| source ---|---|--- 2026-06-17 15:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moilylgbo72e...

EUVD-2026-37716

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-48117 DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-48117 DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-49076

creationtimestamp| type| source ---|---|--- 2026-06-17 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihqde3tk2z...

CVE-2026-49084

creationtimestamp| type| source ---|---|--- 2026-06-17 13:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihcdx4732g...

CVE-2026-8383

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...