CVE-2026-16442

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-26 00:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx3uwafus2p 2026-08-26 01:25:13+00:00| seen|...

Malicious code in @activepieces/piece-google-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e200ba4f9d11d42636dbbd1fa698843321af8b0bd23ff63493c0ce94891a5cb src/index.js imports childprocess and issues POST requests alongside a ping command invocation lines 25, 38, 49. The co-occurrence of childprocess...

Malicious code in @activepieces/piece-google-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d347d6252c2a1bb21b4318c0a319be36d60a95b4146d91108cee13d52c5759 The published tarball for @activepieces/piece-google-forms 0.5.7 contains src/index.js which imports childprocess, invokes ping-style OS command...

CVE-2026-19035

creationtimestamp| type| source ---|---|--- 2026-08-06 12:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5zzhrkd3qttpp...

CVE-2026-20288

creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

CVE-2026-5158

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-18654

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:19+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfpk5xb2k...

CVE-2026-7693

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfzfep7552j...

CVE-2026-70556

Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenticated user's account by submitting a...

CVE-2026-18649

creationtimestamp| type| source ---|---|--- 2026-08-06 12:02:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfyo4ynu22q 2026-08-06 12:02:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048457828808782 2026-08-07 10:12:54+00:00|...

EUVD-2026-53863

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-5651

creationtimestamp| type| source ---|---|--- 2026-08-06 11:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfw24rww22r 2026-08-06 11:32:54+00:00| seen| https://bsky.app/profile/potato.software/post/3msfwzuowjz2s...

CVE-2026-7441

creationtimestamp| type| source ---|---|--- 2026-08-06 09:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfpdjfetg2g...

CVE-2026-18597

creationtimestamp| type| source ---|---|--- 2026-08-06 08:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bvtg77ftldk5t...

CVE-2026-12996

creationtimestamp| type| source ---|---|--- 2026-08-06 08:03:18+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msfld3jl472l...

CVE-2026-13154

The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as...

CVE-2026-13154 Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint

The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as...

CVE-2026-13154

The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as...

EUVD-2026-53736

The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as...

CVE-2026-13154

The CVE-2026-13154 entry concerns the Gutenberg Essential Blocks WordPress plugin, affected versions are before 6.4.0. The issue arises because the plugin does not verify that an attacker-supplied post type is publicly viewable before querying it in a public REST route, enabling unauthenticated u...