Server-side request forgery (SSRF) via unvalidated RSS feed URLs

More info at https://contao.org/en/security-advisories/server-side-request-forgery-via-unvalidated-rss-feed-urls...

Arbitrary Command Execution

GitHub CLI is vulnerable to Arbitrary Command Execution. The vulnerability is due to insufficient validation of JupyterLab URLs returned by a Codespace, where attacker-controlled non-loopback URLs such as vscode:// are passed to VS Code, allowing malicious Codespaces to execute arbitrary commands...

CVE-2026-57424 WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay Payment Links for WooCommerce: from n/a through = 2.1.4...

CVE-2026-57424

CVE-2026-57424 affects the WordPress plugin Razorpay Payment Links for WooCommerce (rzp-woocommerce). Multiple sources describe a Missing Authorization / Broken Access Control vulnerability in versions up to and including 2.1.4, allowing exploitation of improperly configured access control. Conne...

CVE-2026-15522

creationtimestamp| type| source ---|---|--- 2026-07-13 03:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqseevj52c 2026-07-13 03:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiqz75lmn2x 2026-07-13 21:03:37+00:00| seen|...

CVE-2026-15524

creationtimestamp| type| source ---|---|--- 2026-07-13 03:28:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqiqreyjsq26 2026-07-13 03:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiramtlks2w...

CVE-2026-15521

creationtimestamp| type| source ---|---|--- 2026-07-13 02:28:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqinfvtqii2f 2026-07-13 03:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqishukvj72t...

CVE-2026-15516

creationtimestamp| type| source ---|---|--- 2026-07-13 01:31:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqikbabw3d23 2026-07-13 01:32:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqikbcff2j2i 2026-07-13 03:44:27+00:00| seen|...

Decidim - Private exports can be downloaded through reusable links

Description The normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without authentication by anyone who obtains it. Impact Personal data exports can be retrieved through leakage channels such ...

CVE-2026-15510

creationtimestamp| type| source ---|---|--- 2026-07-12 23:35:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqidqncgq226 2026-07-12 23:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiefc2vp526 2026-07-13 03:15:05+00:00| seen|...

CVE-2026-15506

creationtimestamp| type| source ---|---|--- 2026-07-12 22:29:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqia2lm2hr26 2026-07-12 23:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqie4dn33n2w 2026-07-13 01:00:36+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-56313

creationtimestamp| type| source ---|---|--- 2026-07-12 12:30:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6liqhun2y 2026-07-12 13:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhacp5ihg2w 2026-07-12 13:02:28+00:00| seen|...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15474

creationtimestamp| type| source ---|---|--- 2026-07-12 03:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgajgvj5q2w 2026-07-12 03:37:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgasx3ayb2e...

CVE-2026-61448

creationtimestamp| type| source ---|---|--- 2026-07-11 14:37:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevafnkle2e 2026-07-11 15:28:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqey2ecj722e 2026-07-11 17:07:04+00:00| seen|...

CVE-2026-15010

creationtimestamp| type| source ---|---|--- 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5qoz5cx22 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqe5qog3a22o 2026-07-11 08:07:12+00:00| seen|...

CVE-2026-12738

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5ibgnnh27 2026-07-11 07:34:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5madgpn2e...

CVE-2026-13116

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...

CVE-2026-15338

creationtimestamp| type| source ---|---|--- 2026-07-11 04:42:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtxhnb7y2y 2026-07-11 05:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyrtsfv2k 2026-07-13 00:00:20+00:00| seen|...