CVE-2026-49765

creationtimestamp| type| source ---|---|--- 2026-06-15 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocts5wrkx2d 2026-06-15 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeape3ncj2p 2026-06-16 05:01:02+00:00| seen|...

CVE-2026-12219

creationtimestamp| type| source ---|---|--- 2026-06-15 08:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctpsxxop2b...

CVE-2026-12216

creationtimestamp| type| source ---|---|--- 2026-06-15 07:56:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocspir3xf2m...

CVE-2026-49113

creationtimestamp| type| source ---|---|--- 2026-06-15 07:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocqgz2rtq2p 2026-06-17 00:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh2yktud42v...

EUVD-2026-36699

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...

CVE-2026-49781

creationtimestamp| type| source ---|---|--- 2026-06-15 05:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocjqov2dg2u 2026-06-15 21:14:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7cnqii524 2026-06-16 03:00:46+00:00| seen|...

CVE-2026-12207

creationtimestamp| type| source ---|---|--- 2026-06-15 04:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moche6j44n27...

CVE-2026-12211

creationtimestamp| type| source ---|---|--- 2026-06-15 04:28:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moch3a2xrd2b...

CVE-2026-12210

creationtimestamp| type| source ---|---|--- 2026-06-15 04:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocgsbltkd2z...

CVE-2025-31272

creationtimestamp| type| source ---|---|--- 2026-06-15 04:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocfjgoaes2d...

CVE-2026-38812

creationtimestamp| type| source ---|---|--- 2026-06-15 01:42:25+00:00| seen| https://gist.github.com/jjcjgo/36a5d07c3a66d2df8981075dad926ecd...

CVE-2026-47162

creationtimestamp| type| source ---|---|--- 2026-06-15 01:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n 2026-06-21 22:43:05+00:00| seen| https://bsky.app/profile/canartuc.com/post/3motgzrwjm222...

EUVD-2026-36668

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been...

CVE-2026-12188

creationtimestamp| type| source ---|---|--- 2026-06-15 00:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobyspc63j2o...

CVE-2019-25662

creationtimestamp| type| source ---|---|--- 2026-06-15 00:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mobyhqyxlv2f...

PT-2026-49564

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.0 Description Attacker-controlled input included in multipart/payload headers can be used to modify a request to inject additional headers or change the request contents. This occurs when an application passes...

PT-2026-49329

Name of the Vulnerable Software and Affected Versions Benjamin Jonard Koillection version 1.8.0 Description An authenticated Server-Side Request Forgery SSRF exists in the custom scraper subsystem component. This allows attackers to scan internal resources by supplying a crafted URL. SSRF is a fl...

PT-2026-49215

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

PT-2026-49421

Contributor Arbitrary File Deletion in Link Library = 7.8.8 versions...

PT-2026-49484

Name of the Vulnerable Software and Affected Versions Visual Link Preview versions prior to 2.4.2 Description An issue in the plugin leads to the exposure of sensitive subscriber data. Recommendations Update to version 2.4.2 or later...