CVE-2026-55670

creationtimestamp| type| source ---|---|--- 2026-07-11 00:20:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfdy3lxe2y...

CVE-2026-55883

creationtimestamp| type| source ---|---|--- 2026-07-11 00:18:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqdfagtiqy2i 2026-07-11 03:34:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdq7ecayc2y...

CVE-2026-57584

creationtimestamp| type| source ---|---|--- 2026-07-11 00:15:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqdf2hr6su2q 2026-07-11 03:42:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdqmbcusy2y 2026-08-28 18:35:48+00:00| published-proof-of-concept|...

GHSA-5XFX-XJ4H-5P7R

creationtimestamp| type| source ---|---|--- 2026-07-11 00:12:22+00:00| seen| https://gist.github.com/alon710/c12d56fc3c8087be09be97f40fd8c89a...

CVE-2026-11914

creationtimestamp| type| source ---|---|--- 2026-07-11 00:07:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqdelpyuob24 2026-07-11 03:52:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdr6qaasz2s...

CVE-2026-57439

creationtimestamp| type| source ---|---|--- 2026-07-11 00:05:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdei4ttcn2e...

CVE-2026-55417

creationtimestamp| type| source ---|---|--- 2026-07-11 00:04:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdegr4ays2y...

CVE-2026-42952

creationtimestamp| type| source ---|---|--- 2026-07-11 00:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqdeaiktsn2j 2026-07-11 00:00:54+00:00| seen| https://bsky.app/profile/potato.software/post/3mqdeajkg5e2x 2026-07-11 00:26:47+00:00| seen|...

PT-2026-57403

Name of the Vulnerable Software and Affected Versions SureCart versions prior to 4.2.4 Description An issue exists that allows privilege escalation via account takeover. The software fails to properly validate a user's identity when updating details, such as the email address, during customer...

CVE-2026-14286

creationtimestamp| type| source ---|---|--- 2026-07-10 23:52:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqddr3y7pj2i...

CVE-2026-55783

creationtimestamp| type| source ---|---|--- 2026-07-10 23:41:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd5ebveh2d...

GHSA-H4G2-XFMW-Q2C9

creationtimestamp| type| source ---|---|--- 2026-07-10 23:12:24+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745 2026-07-11 00:01:00+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745...

CVE-2026-15377

creationtimestamp| type| source ---|---|--- 2026-07-10 22:55:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdalv4kgn2y 2026-07-11 00:17:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf6d2id22c...

CVE-2026-1667

creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdacfneqy2i 2026-07-11 00:14:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdezilp4u2y 2026-07-11 00:54:12+00:00| seen|...

CVE-2026-54163

creationtimestamp| type| source ---|---|--- 2026-07-10 22:35:03+00:00| published-proof-of-concept| https://github.com/github/secureheaders/security/advisories/GHSA-rqq5-2gf9-4w4q 2026-07-18 00:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquxwpunrt2e...

CVE-2026-44383

CVE-2026-44383 concerns Hydro-Québec Le Circuit Electrique charging station backend with insufficient session expiration. The issue allows multiple connections using the same charging station ID, enabling attackers to deploy multiple OCPP clients to overwhelm the backend, impacting availability (...

CVE-2026-44383 Hydro-Québec Le Circuit Electrique charging station backend Insufficient Session Expiration

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend...

CVE-2026-56335

creationtimestamp| type| source ---|---|--- 2026-07-10 21:23:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3gbkepx2y...

CVE-2026-58499 Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message senderid field was not validated as a path-safe identifier, unlike appid and projectid. During user-memory extraction, senderid i...

CVE-2026-59882

A flaw was found in guzzlehttp/psr7, a PHP library for HTTP messages. The Uri::assertValidHost function fails to properly validate URI host components, allowing for the inclusion of authority delimiters, embedded ports, or malformed IPv6 brackets. This improper validation can lead to discrepancie...