NPM: Ghost: Member existence leak via magic link sign-in response

NPM: Ghost: Member existence leak via magic link sign-in response vulnerability discovered by ? in WordPress Npm ghost versions = 5.18.0, 6.21.1...

GHSA-3CG5-48J3-V4GV

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...

CVE-2026-70494

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d 2026-08-04 22:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4gwhhcjz2ufst...

CVE-2026-66902

creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...

CVE-2026-66901

creationtimestamp| type| source ---|---|--- 2026-08-04 21:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3iwqm2chk7oin...

CVE-2026-70620 Odysseus SSRF via Embedding Endpoint Configuration

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind...

CVE-2026-45538

creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...

CVE-2026-70486

creationtimestamp| type| source ---|---|--- 2026-08-04 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n 2026-08-04 22:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5...

GHSA-H6X2-583H-X99R Open WebUI: DNS Rebinding SSRF Bypass

Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...

CVE-2026-67551

creationtimestamp| type| source ---|---|--- 2026-08-04 19:48:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6xhmka3yohgj5 2026-08-05 06:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5imjmiyodl5vq...

CVE-2026-68080

creationtimestamp| type| source ---|---|--- 2026-08-04 19:36:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ipitlklyvgkln...

CVE-2026-68077

creationtimestamp| type| source ---|---|--- 2026-08-04 19:24:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dmnlv6p3la6cs...

CVE-2026-16618

creationtimestamp| type| source ---|---|--- 2026-08-04 19:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpr42iup2l...

CVE-2026-47616

creationtimestamp| type| source ---|---|--- 2026-08-04 18:49:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msboiblw2p2l...

CVE-2026-66275

creationtimestamp| type| source ---|---|--- 2026-08-04 18:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ff4uaoe56so2a...

CVE-2026-47623

creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bly5qs5x5ynn 2026-08-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msl6vsra472o...

EUVD-2026-52809

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-64630

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...

CVE-2026-15314 Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash...

CVE-2026-10032

creationtimestamp| type| source ---|---|--- 2026-08-04 16:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j7o7c57m4b5cj 2026-10-02 23:30:28+00:00| seen| https://gist.github.com/alon710/bbef448ddedc6cabee70ea28e567bc12...