CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2026-63086

creationtimestamp| type| source ---|---|--- 2026-07-16 19:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwhp7yyy22...

CVE-2026-50979

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:13+00:00| seen| Telegram/t092y5BgJmODHc3D2a3Ra4fTCXsa-vHp4gQ4JjPUYAbfUJ0 2026-07-16 19:00:13+00:00| seen| Telegram/c-tiQItlsunczDQWBYAXRvkiYxV7bIvmHKFdwaGGudIBj1Y 2026-07-17 00:00:29+00:00| seen|...

CVE-2026-59863

creationtimestamp| type| source ---|---|--- 2026-07-16 16:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqroonmn3q2m...

CVE-2026-59866

creationtimestamp| type| source ---|---|--- 2026-07-16 15:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrluxqhxd2c 2026-07-16 16:50:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroxp5a7c2p...

CVE-2026-15103

creationtimestamp| type| source ---|---|--- 2026-07-16 11:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr42qdens2n...

CVE-2026-2945

creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:05+00:00| seen| https://gist.github.com/this1slwl/d975073bb5feaafd09d9383e8351fb55...

CVE-2026-15306

creationtimestamp| type| source ---|---|--- 2026-07-16 07:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqdhqwci2a...

CVE-2026-15697

A flaw was found in svgdotjs svg.js. A remote attacker could exploit a vulnerability in the EventTarget.on function, which improperly controls modifications to object prototype attributes. This could allow an attacker to manipulate object properties, potentially leading to unintended behavior or...

CVE-2026-13005

creationtimestamp| type| source ---|---|--- 2026-07-16 04:04:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqe6qijht22...

CVE-2026-15336

creationtimestamp| type| source ---|---|--- 2026-07-16 03:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqdexyob522...

CVE-2026-45533

creationtimestamp| type| source ---|---|--- 2026-07-16 00:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzaxejrl2h...

Linux Distros Unpatched Vulnerability : CVE-2026-49459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve...

CVE-2026-40956

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:32+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptvxfo62x...

CVE-2026-8055

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...

CVE-2026-52881

creationtimestamp| type| source ---|---|--- 2026-07-15 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpey6zobs2c...

CVE-2026-12382

A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...

EUVD-2026-44739

A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...

CVE-2026-12382 Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing

A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...

CVE-2026-12382 Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing

A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...