CVE-2026-9597: Authentication Bypass by Primary Weakness

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation...

PT-2026-59013

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function parse url/prepare image/openai audio to text of the file src/agentscope/tool/ multi modality/ openai tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument...

PT-2026-58952

Description The normal download your data flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without authentication by anyone who obtains it. Technical description This private export flow turns an authenticated,...

GHSA-2FFJ-W4MJ-PG37

creationtimestamp| type| source ---|---|--- 2026-07-12 22:58:01+00:00| seen| https://gist.github.com/wyattgill9/990529c04d4b62e11a1f63fb789c30e4...

CVE-2020-3961

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6702 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6702 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6702...

CVE-2020-6110

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6631 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6631 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6631 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/182...

CVE-2020-15896

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7083 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7083 2026-07-14 00:00:50+00:00| seen| https://t.me/pleyadesit/7083...

CVE-2020-15299

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/6928 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6928 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6928...

CVE-2020-15895

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7083 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7083 2026-07-14 00:00:50+00:00| seen| https://t.me/pleyadesit/7083...

CVE-2026-15548

creationtimestamp| type| source ---|---|--- 2026-07-12 21:21:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116909098681190525...

CVE-2026-15505

creationtimestamp| type| source ---|---|--- 2026-07-12 20:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhzcc6z252e 2026-07-12 23:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiex6yemk2x 2026-07-13 00:15:03+00:00| seen|...

CVE-2026-10663

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpqtx3wg2a 2026-07-12 19:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhw6aaisn2i 2026-07-14 00:35:05+00:00| seen|...

CVE-2026-15502

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbrrkom622 2026-07-12 13:38:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhceppdnl2w 2026-07-12 17:16:28+00:00| seen|...

GHSA-PHRQ-PC6R-F6GH

creationtimestamp| type| source ---|---|--- 2026-07-12 13:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589 2026-07-13 00:00:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589...

CVE-2026-56241

creationtimestamp| type| source ---|---|--- 2026-07-12 12:36:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6wgwogn2i 2026-07-12 12:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh7l7ob2b26 2026-07-12 14:01:25+00:00| seen|...

CVE-2026-56252

creationtimestamp| type| source ---|---|--- 2026-07-12 12:27:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6hb2dvi2x 2026-07-14 00:43:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxyloxkn2w...

CVE-2026-61874 filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete

filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in DeleteWithPathPrefix, allowing authenticated users to leave stale public shares behind. Attackers can delete a shared directory using a trailing-slash path, then recreate the same directory to expose ne...

CVE-2026-15495

creationtimestamp| type| source ---|---|--- 2026-07-12 11:33:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3fua6jo2z 2026-07-14 00:37:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxoxfy4y27...

CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15477

creationtimestamp| type| source ---|---|--- 2026-07-12 05:32:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqghb752f32x 2026-07-12 07:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgpgpsue72z...