CVE-2026-19079

creationtimestamp| type| source ---|---|--- 2026-08-07 08:37:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ppz2ygcs73pe...

CVE-2026-71478

creationtimestamp| type| source ---|---|--- 2026-08-07 08:30:29+00:00| seen| https://bsky.app/profile/suriq.io/post/3msi5cloptd2l...

DEBIAN-CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-5391

creationtimestamp| type| source ---|---|--- 2026-08-07 03:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u...

CVE-2026-19149

creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...

CVE-2026-64638

creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...

CVE-2026-62873

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheab5dm32t 2026-08-07 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117051990119645465 2026-08-08 06:07:07+00:00| seen|...

CVE-2026-56162

creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw3kw6c2u 2026-08-07 17:11:29+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117055327985847646 2026-08-08 03:07:07+00:00| seen|...

CVE-2026-3418

creationtimestamp| type| source ---|---|--- 2026-08-07 00:38:31+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuo2pnf2j...

CVE-2026-48087

creationtimestamp| type| source ---|---|--- 2026-08-06 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m 2026-08-09 04:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27 2026-08-09 05:28:38+00:00| seen|...

CVE-2026-48085

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to /setup/create-admin-account and creates additional GLOBALADMIN accounts without...

CVE-2026-48083 OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the /api/log endpoint accepts unauthenticated POST requests, applies no schema validation to the message body, writes attacker-controlled content directly into the...

CVE-2026-66708

creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...

CVE-2026-71476

creationtimestamp| type| source ---|---|--- 2026-08-06 20:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgwbqkenv23...

CVE-2026-18258

creationtimestamp| type| source ---|---|--- 2026-08-06 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtg7o27v2t...

Malicious code in vite-plugin-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bc445ea196f979ad69189f4498586a09a51855b97e95dea02d01d197620237 package.json declares an optionalDependency vite-cleaning-tools pointing at github:vite-plugins/vite-cleaning-tools with no commit SHA or tag, so npm...

MAL-2026-13466 Malicious code in wormgpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c The package's bin entries wormgpt-cli, wormgpt, deepholegpt, wgpt map to bin/victim.js, which silently spawns a detached implant on any invocation...

CVE-2026-33930

creationtimestamp| type| source ---|---|--- 2026-08-06 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgn2qtzic2r...

CVE-2026-13342 Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password

The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeati...

CVE-2026-13342

CVE-2026-13342 affects the Security Optimizer WordPress plugin (versions 1.5.8–1.6.4). The IP-based login restriction can be bypassed due to improper validation, allowing unauthenticated requests from non-allowlisted IPs to access the login form. Impact: defeats administrator-configured access co...