GHSA-HWMJ-QG4V-CVG9

creationtimestamp| type| source ---|---|--- 2026-07-08 14:41:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e2piu2p26...

CVE-2024-00001

creationtimestamp| type| source ---|---|--- 2026-07-08 14:03:59+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq5bxdedta2g 2026-07-10 04:27:21+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqbco2xkwm2p 2026-07-28 15:34:40+00:00| seen|...

New Ghost Phishing Wave Is Breaking Traditional Email Security

A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it decrypts and comes to life inside the victim’s browser. For security leaders, the risk is clear:...

CVE-2026-6280

creationtimestamp| type| source ---|---|--- 2026-07-08 12:51:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq55wi3vpt2l...

CVE-2026-57255

creationtimestamp| type| source ---|---|--- 2026-07-08 12:46:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq55njkvjd27...

CVE-2026-57249

creationtimestamp| type| source ---|---|--- 2026-07-08 12:12:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq53pxt7tc2z...

CVE-2026-57248

creationtimestamp| type| source ---|---|--- 2026-07-08 11:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52rcsigj2i...

CVE-2026-57252

creationtimestamp| type| source ---|---|--- 2026-07-08 11:52:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52lrws4e27...

CVE-2021-44730

creationtimestamp| type| source ---|---|--- 2026-07-08 11:11:38+00:00| seen| https://gist.github.com/julian-klode/eb0381c1cb2cec713ba78d7462ad6167...

CVE-2026-41989

creationtimestamp| type| source ---|---|--- 2026-07-08 10:50:03+00:00| seen| https://bsky.app/profile/selfhost.directory/post/3mq4x4jjzqo2f 2026-07-28 16:50:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2026-5356

creationtimestamp| type| source ---|---|--- 2026-07-08 09:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4rulj6i322 2026-07-08 14:03:52+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq5bx4gcog2v...

CVE-2026-14495

creationtimestamp| type| source ---|---|--- 2026-07-08 08:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4psgrlep2i 2026-07-09 00:00:43+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq6dcev5hs2p...

CVE-2026-11798

creationtimestamp| type| source ---|---|--- 2026-07-08 08:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4oxlcgr72q...

CVE-2026-9842

creationtimestamp| type| source ---|---|--- 2026-07-08 08:14:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ogu64d32x...

CVE-2026-14489

creationtimestamp| type| source ---|---|--- 2026-07-08 07:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4l5yqzvw22 2026-07-08 07:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4nlgda2z27 2026-07-09 00:00:41+00:00| seen|...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...

CVE-2026-12936

creationtimestamp| type| source ---|---|--- 2026-07-08 06:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4hspcfea2p...

CVE-2026-14495 DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token

The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists because dologin\s::rrand seeds the Mersenne Twister with mtsranddouble microtime 1000000 — discarding the integer-second...

CVE-2026-14487

creationtimestamp| type| source ---|---|--- 2026-07-08 04:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4d4hox3y2r 2026-07-08 06:00:10+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq4gw7nccj27 2026-07-08 07:32:06+00:00| seen|...

CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy aibridgeproxyd created a goproxy server whose default transport set InsecureSkipVerify: true and only assigned a...