CVE-2026-8396

creationtimestamp| type| source ---|---|--- 2026-07-17 13:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtvkg25eb2x 2026-07-19 12:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyq7hygfj23...

CVE-2026-16072

CVE-2026-16072 affects Keycloak’s organization management component. A delegated administrator with org-management permissions can create an invitation for a non-existent email address and then fetch the secret registration link via the API, enabling creation of new user accounts and their additi...

CVE-2026-16072

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

CVE-2026-16072

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

CVE-2026-16072 Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

EUVD-2024-55659

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...

CVE-2024-23567

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...

CVE-2026-15094

creationtimestamp| type| source ---|---|--- 2026-07-17 11:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtonqazmg2d 2026-07-21 06:00:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15094.yaml 2026-07-22...

CVE-2026-8075

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

CVE-2023-46850

creationtimestamp| type| source ---|---|--- 2026-07-17 11:00:07+00:00| seen| https://t.me/cyberwarehouse/177 2026-07-18 00:00:28+00:00| seen| https://t.me/cyberwarehouse/177...

CVE-2023-46849

creationtimestamp| type| source ---|---|--- 2026-07-17 11:00:06+00:00| seen| https://t.me/cyberwarehouse/177 2026-07-18 00:00:28+00:00| seen| https://t.me/cyberwarehouse/177...

CVE-2026-59252

creationtimestamp| type| source ---|---|--- 2026-07-17 10:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtllcpgvo2k 2026-09-25 23:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mwewybtqgb2k...

CVE-2026-8075

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

EUVD-2026-45157

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

CVE-2026-8075 Posting a malicious markdown image crashes the Mattermost Desktop App

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

CVE-2018-19526

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/93 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/93...

CVE-2019-6449

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/107 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/106 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/107 2026-07-18 01:00:13+00:00| published-proof-of-concept|...

CVE-2018-12419

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/80 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/80...

CVE-2026-9656

creationtimestamp| type| source ---|---|--- 2026-07-17 07:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtayymiut27...

CVE-2026-62764

creationtimestamp| type| source ---|---|--- 2026-07-17 06:34:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqt4zjdzoo2e 2026-07-17 14:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxfpq6gq2i...