CVE-2026-59724 Socket.IO: Engine.IO WebTransport SID DoS

Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as proto through an inherited property of the clients object during WebTransport upgrade handling, causing a...

CVE-2026-9731

creationtimestamp| type| source ---|---|--- 2026-07-08 08:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4oojt3zg2z...

ECHO-2E89-77F4-18BD

Bulletin has no description...

MINI-6988-25GG-F3H8

Bulletin has no description...

MINI-M2C4-64M7-86W6

Bulletin has no description...

MINI-7GXJ-RP8V-V7VR

Bulletin has no description...

MINI-CXGR-HXJ3-8CJV

Bulletin has no description...

MINI-RP2V-XW5X-53HG

Bulletin has no description...

MINI-CJ95-7GRH-4M3J

Bulletin has no description...

MINI-8WRF-R5J6-F2G9

Bulletin has no description...

MINI-7G42-23JQ-G2PP

Bulletin has no description...

MINI-7MC5-JXVR-RGG9

Bulletin has no description...

MINI-CJC8-V3F5-2H75

Bulletin has no description...

MINI-MQRG-2HHV-X2VV

Bulletin has no description...

MINI-J9P7-32RR-CP7V

Bulletin has no description...

CVE-2026-14482

creationtimestamp| type| source ---|---|--- 2026-07-08 07:27:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4lrjxew42l...

CVE-2026-12936

creationtimestamp| type| source ---|---|--- 2026-07-08 06:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4hspcfea2p...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

CVE-2026-9701

creationtimestamp| type| source ---|---|--- 2026-07-08 04:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4d4g7zbx2q 2026-07-08 06:00:09+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq4gw5xwgz2x 2026-07-08 07:22:03+00:00| seen|...