CVE-2026-59151

creationtimestamp| type| source ---|---|--- 2026-07-10 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsuscyeq2z 2026-07-10 20:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcysjpafd2g 2026-07-11 01:13:41+00:00| seen|...

CVE-2026-51599

creationtimestamp| type| source ---|---|--- 2026-07-10 18:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsk2unmk2h...

CVE-2026-55464 Snipe-IT: Stored XSS via Markdown custom field

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with assets.edit permission to place a malicious link in a markdown-textarea custom field that executes arbitrary JavaScrip...

CVE-2026-53653

creationtimestamp| type| source ---|---|--- 2026-07-10 18:20:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqcra4ilol2c 2026-07-10 22:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdadyx4fk27 2026-07-10 23:35:17+00:00| seen|...

CVE-2026-56667

ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to router.push without applying the isSafeRedirectUri check, allowing an organization or instance administrator to store a...

CVE-2026-58492

creationtimestamp| type| source ---|---|--- 2026-07-10 17:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcpfumldx24 2026-07-10 23:13:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbkwnpvh2d 2026-07-10 23:13:07+00:00| seen|...

CVE-2026-56813

creationtimestamp| type| source ---|---|--- 2026-07-10 17:44:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp6v44l32e 2026-07-10 21:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd4zxcvbj2d...

CVE-2026-55671 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...

CVE-2026-55671 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...

CVE-2026-33382

creationtimestamp| type| source ---|---|--- 2026-07-10 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrjabny2r 2026-07-10 22:29:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd75hwwav2i 2026-07-11 00:20:09+00:00| seen|...

CVE-2026-61431

creationtimestamp| type| source ---|---|--- 2026-07-10 16:57:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmlhpqih2l 2026-07-10 20:18:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxtbl45i2f 2026-07-10 22:05:28+00:00| seen|...

CVE-2026-61441

creationtimestamp| type| source ---|---|--- 2026-07-10 16:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcl6piort2i 2026-07-10 22:21:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6omq2ei26 2026-07-10 23:26:14+00:00| seen|...

CVE-2026-61432

creationtimestamp| type| source ---|---|--- 2026-07-10 16:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckwzwntr2k 2026-07-10 20:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxneg5ju2i 2026-07-10 23:29:45+00:00| seen|...

Malicious Package

Overview @genie-auth/config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-61492

creationtimestamp| type| source ---|---|--- 2026-07-10 16:18:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckeuxhu526 2026-07-10 20:21:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxxf2ixm2d 2026-07-10 22:29:17+00:00| seen|...

CVE-2026-46340

creationtimestamp| type| source ---|---|--- 2026-07-10 16:17:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqckepga3q2a...

Malicious Package

Overview polygon-gamma-apis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-60091

creationtimestamp| type| source ---|---|--- 2026-07-10 16:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjpwr6kh2q 2026-07-10 20:15:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxmqnilo2c 2026-07-15 16:35:50+00:00| seen|...

CVE-2026-54469

creationtimestamp| type| source ---|---|--- 2026-07-10 15:30:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116896393517811948 2026-07-10 17:27:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoasxcp327 2026-07-10 21:24:23+00:00| seen|...

CVE-2026-56765

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission checks against user-supplied task IDs but fetches...