CVE-2026-58467

creationtimestamp| type| source ---|---|--- 2026-07-03 00:03:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaogi76s2i 2026-07-03 15:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtbel3yw2j...

PT-2026-55520

Name of the Vulnerable Software and Affected Versions Destekz versions through 02062026 Description An SQL injection issue exists where user input is passed into database queries without proper sanitization. This allows a remote, unauthenticated attacker to inject arbitrary SQL commands over the...

CVE-2026-59094

creationtimestamp| type| source ---|---|--- 2026-07-02 23:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp7cwzdsd2s 2026-07-03 15:10:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtd5su7o2j...

CVE-2026-8441

creationtimestamp| type| source ---|---|--- 2026-07-02 22:23:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpp327ptzn2o 2026-07-02 22:23:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp32aiaer2u 2026-07-03 03:35:32+00:00| seen|...

CVE-2026-9145

creationtimestamp| type| source ---|---|--- 2026-07-02 22:18:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2suimi22o 2026-07-03 03:22:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplrucijr2n...

CVE-2026-13459

creationtimestamp| type| source ---|---|--- 2026-07-02 22:17:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2r4ufnl2d 2026-07-03 03:24:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplvcmmnk2o...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-59097

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

Regular Expression Denial of Service (ReDoS)

Overview org.webjars.npm:jsonata is a JSON query and transformation language Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the $toMillis function. An attacker can cause resource exhaustion by providing specially crafted inputs that trigger...

CVE-2026-59097

Taiga (software) prior to version 6.10.2 contains a missing authorization vulnerability that lets unauthenticated remote attackers create default due-date records in any project by abusing unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. An arbitrary project id...

EUVD-2026-41428

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-50192

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:11+00:00| published-proof-of-concept| https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j...

CVE-2026-50746

creationtimestamp| type| source ---|---|--- 2026-07-02 18:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponk2wkp327 2026-07-03 21:35:47+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpriumewrl2b 2026-07-07 13:30:26+00:00| seen|...

CVE-2026-38057

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:11+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01 2026-07-10 21:54:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd56jbznv2f 2026-07-12 11:00:54+00:00| seen|...

CVE-2026-13768

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03 2026-07-03 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853102484273046 2026-07-03 00:00:46+00:00| seen|...

CVE-2026-55112

creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj52seyz2v 2026-07-02 18:34:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpooaqbvzg2h 2026-07-03 07:16:31+00:00| seen|...

CVE-2026-58455

creationtimestamp| type| source ---|---|--- 2026-07-02 17:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj2vvyxr2v 2026-07-02 19:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoprdjawj2u 2026-07-03 07:26:43+00:00| seen|...