CVE-2026-15696

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmllzp5fa25 2026-07-22 04:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ixjgjm62j...

BIT-PARSE-2026-57480 Parse Server: Denial of service via exponential-time processing of deeply nested query operators

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.82, deeply nested $or, $and, and $nor query condition operators in the REST API or LiveQuery query handling could trigger exponential-time processing in the internal...

CVE-2026-60119

Hi.Events through v1.10.0-beta contains an XSS vulnerability in the event title handling. An authenticated user with event creation/edit privileges can inject HTML/JavaScript by placing a malicious title containing , which is not escaped by JSON.stringify when embedded in inline script data. This...

CVE-2026-60119 Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection

Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaScript by embedding a malicious event title containing the sequence, which is not escaped by JSON.stringify when...

CVE-2026-53410

creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjicwo2y2e 2026-07-14 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-16 14:23:57+00:00| seen|...

CVE-2026-12707

CVE-2026-12707 affects Cloudflare quiche. After QUIC handshakes, an attacker can trigger unbounded queuing of PathEvent::ReusedSourceConnectionId during rapid source address migration, causing memory resource exhaustion. Affected component is quiche’s PathEvents collection (path_event_next() drai...

CVE-2026-15697

CVE-2026-15697 affects the svgdotjs svg.js library (up to v3.2.5). The vulnerability is in the EventTarget.on function, enabling manipulation that leads to improperly controlled modification of object prototype attributes (prototype pollution). It is described as exploitable remotely with a repor...

CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...

CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...

CVE-2026-52533

creationtimestamp| type| source ---|---|--- 2026-07-14 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmhdbr2fk2t 2026-08-13 15:50:13+00:00| seen| https://bsky.app/profile/zuh.re/post/3msxyofhvsc24 2026-08-16 10:41:28+00:00| seen|...

Windows Event Logging Service Information Disclosure Vulnerability

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network...

CVE-2026-15678

creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...

CVE-2026-15626

creationtimestamp| type| source ---|---|--- 2026-07-14 05:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljkqzsov2w 2026-07-19 20:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmib3x532j...

CVE-2026-45196

creationtimestamp| type| source ---|---|--- 2026-07-14 04:14:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldrwg3wj26 2026-07-16 08:22:17+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqslpaf742y...

CVE-2026-15622

creationtimestamp| type| source ---|---|--- 2026-07-14 01:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql32izw6q2t 2026-07-19 20:29:16+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzmmfr4ff2y...

CVE-2026-15557

creationtimestamp| type| source ---|---|--- 2026-07-14 01:15:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzsyepf42x...

GHSA-XF7X-X43H-RPQH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:11:57+00:00| seen| https://gist.github.com/alon710/b44757b6afa3477e3470b6c4803062d7...

GHSA-GW94-85M2-X8V2

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3258 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3258...

CVE-2026-56099

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3260 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3260 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187721 2026-09-02 01:00:21+00:00|...