CVE-2026-14838 Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14838 Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

GHSA-3F7W-8RR8-F37F

creationtimestamp| type| source ---|---|--- 2026-08-04 08:31:39+00:00| seen| https://gist.github.com/alon710/e29226c330282c9416a9859028fe2877 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...

GHSA-524P-V8JX-3FW6

creationtimestamp| type| source ---|---|--- 2026-08-04 08:29:03+00:00| seen| https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a...

CVE-2026-18755

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

WordPress Link Library plugin < 7.9.4 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Joshua Martinelle in WordPress Plugin Link Library versions 7.9.4...

CVE-2026-18755 GV-ASManager DLL hijacking vulnerability

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

EUVD-2026-52639

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

GHSA-69XF-PQRW-596X

creationtimestamp| type| source ---|---|--- 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360 2026-08-05 00:00:52+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360...

CVE-2026-67312

creationtimestamp| type| source ---|---|--- 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3359 2026-08-05 00:00:52+00:00| published-proof-of-concept| https://t.me/bdufstecru/3359...

CVE-2026-18569

creationtimestamp| type| source ---|---|--- 2026-08-04 06:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ja5qoxls5iqpf...

GHSA-P538-C434-8V24

creationtimestamp| type| source ---|---|--- 2026-08-04 06:32:33+00:00| seen| https://gist.github.com/alon710/7c801d57bbc1100bfc82173b2522a257...

WhatsApp account takeover scam asks you to “vote for my friend”

A scam is spreading through WhatsApp with the goal of taking over victims' accounts entirely. It starts with a message that feels harmless and familiar. Someone—often a contact whose account has already been compromised—asks you to support a friend or relative of theirs by voting in an online...

CVE-2026-67610

creationtimestamp| type| source ---|---|--- 2026-08-04 06:08:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadx5y3ju2i...

CVE-2026-41452

creationtimestamp| type| source ---|---|--- 2026-08-04 06:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i 2026-08-12 20:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97772 2026-08-13 00:00:06+00:00| published-proof-of-concept|...

CVE-2026-16536

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...

GHSA-MQ44-7P77-Q5H7

creationtimestamp| type| source ---|---|--- 2026-08-04 04:31:10+00:00| seen| https://gist.github.com/alon710/8b85a9db45c3273615bc588dcd240ceb...

CVE-2026-17614

creationtimestamp| type| source ---|---|--- 2026-08-04 04:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bysgnrne72avf...

CVE-2026-69096

creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...

CVE-2026-69243

creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3 2026-08-04 21:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96645 2026-08-05 00:00:21+00:00| published-proof-of-concept|...