CVE-2026-13817

creationtimestamp| type| source ---|---|--- 2026-07-01 19:31:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmayj5ohn2q 2026-07-02 07:19:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:15:41+00:00| seen|...

CVE-2026-7517

creationtimestamp| type| source ---|---|--- 2026-07-01 17:10:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplz4clqbz2f...

CVE-2026-58038

creationtimestamp| type| source ---|---|--- 2026-07-01 16:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplw6dlatg2v 2026-07-02 02:47:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzdnjc5n2q 2026-07-02 06:47:04+00:00| seen|...

Malicious code in npm-show-date-proof-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884f2797ddf6247c906bb97e72b3c0891551b260980811d50c7211ab2ea0bbcf The package's postinstall.js runs on every npm install and collects the installer's username via whoami and os.userInfo, hostname os.hostname, platfo...

MAL-2026-6791 Malicious code in npm-show-date-proof-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884f2797ddf6247c906bb97e72b3c0891551b260980811d50c7211ab2ea0bbcf The package's postinstall.js runs on every npm install and collects the installer's username via whoami and os.userInfo, hostname os.hostname, platfo...

CVE-2026-54266

creationtimestamp| type| source ---|---|--- 2026-07-01 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpllj774tz2l...

Malicious code in date-fns-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...

CVE-2026-58126

creationtimestamp| type| source ---|---|--- 2026-07-01 11:51:57+00:00| seen| https://gist.github.com/VAMorales/6dc232729cdd517fa30d581fbcd98d8f 2026-07-02 02:48:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzgon6cf2q 2026-07-03 11:55:13+00:00| seen|...

CVE-2026-13228

creationtimestamp| type| source ---|---|--- 2026-07-01 11:38:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgke7zeh2l 2026-07-01 12:23:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplj3eg37227 2026-07-01 22:26:57+00:00| seen|...

CVE-2026-11562

creationtimestamp| type| source ---|---|--- 2026-07-01 09:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplau54uab2k...

CVE-2026-10750

creationtimestamp| type| source ---|---|--- 2026-07-01 09:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplapaqefn2u 2026-07-01 12:09:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mplibhzlrp2l 2026-07-02 00:00:23+00:00| seen|...

CVE-2026-51923

creationtimestamp| type| source ---|---|--- 2026-07-01 08:44:39+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/f582fe0ded3bcccead7a7e90fca8c107...

CVE-2026-51925

creationtimestamp| type| source ---|---|--- 2026-07-01 08:34:03+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/09e05b53c3a5e34e9a060860fb2412ba 2026-07-11 00:36:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdga5hxss22...

CVE-2026-11823

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-11823 BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-11823

The CVE-2026-11823 entry concerns the BookingPress Appointment Booking Pro plugin for WordPress, affected up to version 5.7.1. The vulnerability is a SQL Injection via the store_service_date parameter of the bpa_assign_staffmember_to_slots() function. Root cause: user-supplied POST data is passed...

CVE-2026-48283

creationtimestamp| type| source ---|---|--- 2026-07-01 04:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkndl637t2x 2026-07-01 09:45:05+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00|...

CVE-2026-7871

creationtimestamp| type| source ---|---|--- 2026-07-01 04:01:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842723128491080 2026-07-01 17:43:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm2xu7kks26 2026-07-03 04:37:07+00:00| seen|...

CVE-2026-56300

creationtimestamp| type| source ---|---|--- 2026-07-01 02:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkjf23m2326...

CVE-2026-29090

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6j7p-qjhg-9947...