CVE-2026-50739

A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the tracker-campaigns.php script in Revive Adserver 6.0.7 and earlier. As a result, a low‑privileged user could link their trackers to...

CVE-2026-56411

creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...

PT-2026-53029

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.0 Statamic versions prior to 6.20.3 Description The Live Preview endpoint for existing entries and terms in src/Http/Controllers/CP/PreviewController.php only verifies view authorization but accepts and renders...

CVE-2026-56786

creationtimestamp| type| source ---|---|--- 2026-06-25 23:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5mddcyuc2u 2026-06-26 12:10:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp6vzhl4h72q 2026-06-27 17:07:07+00:00| seen|...

CVE-2026-6679

creationtimestamp| type| source ---|---|--- 2026-06-25 23:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5koutula2a 2026-06-30 14:37:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpja36wkfh2v...

CVE-2026-13283

creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...

CVE-2026-56769

creationtimestamp| type| source ---|---|--- 2026-06-25 23:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5k4slih62z...

CVE-2026-56771

creationtimestamp| type| source ---|---|--- 2026-06-25 22:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jtglqfg27...

GO-2026-5688 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit

Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit...

GO-2026-5507 Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server

Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server...

GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...

CVE-2018-9148

creationtimestamp| type| source ---|---|--- 2026-06-25 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5gvakeg62n...

CVE-2026-6450

creationtimestamp| type| source ---|---|--- 2026-06-25 22:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5golcu3b2a...

CVE-2026-6412

creationtimestamp| type| source ---|---|--- 2026-06-25 21:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gh4hh4627...

CVE-2026-6331

creationtimestamp| type| source ---|---|--- 2026-06-25 21:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gdqrqws2u...

CVE-2026-55962

creationtimestamp| type| source ---|---|--- 2026-06-25 21:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5fy2nkfc2s...

CVE-2018-3822

creationtimestamp| type| source ---|---|--- 2026-06-25 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5f7moukh2r...

CVE-2026-5460

creationtimestamp| type| source ---|---|--- 2026-06-25 21:00:16+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp5d5qsu5t2a...

Malicious code in textshape-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e596e1ea1365aadfa6c75047b664bb41b29b60828595b9271d4c2c217476b60 The package presents itself as a Tailwind CSS typography plugin its name, description, and source tree clone @tailwindcss/typography, but src/index.j...

MAL-2026-6475 Malicious code in textshape-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e596e1ea1365aadfa6c75047b664bb41b29b60828595b9271d4c2c217476b60 The package presents itself as a Tailwind CSS typography plugin its name, description, and source tree clone @tailwindcss/typography, but src/index.j...