28163 matches found
CVE-2026-15252
creationtimestamp| type| source ---|---|--- 2026-08-08 08:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskmxwsoxh22 2026-08-09 04:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmpzpez4w2i...
CVE-2026-19268
Summary of CVE-2026-19268 (abdullah1854 MCPGateway) : The vulnerability affects the MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, specifically the Claude Usage Range Endpoint. The issue is in the function getUsageByDateRange within src/services/claude-usage.ts, where a...
EUVD-2026-54768
A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...
CVE-2026-16267 Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects...
CVE-2026-16267
The Newsletters WordPress plugin versions prior to 4.16 is vulnerable to PHP Object Injection . The root cause is the failure to restrict allowed classes when unserialising values received from public form submissions, specifically via a date form field . This allows unauthenticated attackers to ...
CVE-2026-20339
creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...
CVE-2022-4995
Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...
CVE-2026-52021
creationtimestamp| type| source ---|---|--- 2026-08-07 14:32:36+00:00| seen| https://gist.github.com/itsmohitnarayan/e456399f083130962bab6c710f208437...
CVE-2026-17626
creationtimestamp| type| source ---|---|--- 2026-08-07 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msimra6igd2r...
CVE-2026-38053
creationtimestamp| type| source ---|---|--- 2026-08-07 10:12:54+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8 2026-08-08 00:17:13+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8...
GHSA-HQ66-CQWQ-W95J
creationtimestamp| type| source ---|---|--- 2026-08-07 07:36:22+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...
CVE-2026-19189
creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...
CVE-2026-62830
creationtimestamp| type| source ---|---|--- 2026-08-07 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z 2026-08-08 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23 2026-08-11 19:00:41+00:00| seen|...
CVE-2026-64638
creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...
Fedora 43 : php (2026-d755ca77c4)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d755ca77c4 advisory. PHP version 8.4.24 30 Jul 2026 BCMath: Fixed GHSA-x692-q9x7-8c3f Out-of-bounds write in bccomp. CVE-2026-17544 Recep Asan Calendar: Fixed bug GH-226...
SUSE CVE-2026-69240
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. In the Oracle dialect, when val is a string and starts wit...
GHSA-957R-QF9P-67XW
creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...
CVE-2026-66708
creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...