GHSA-2XV2-W8CQ-5GXW

creationtimestamp| type| source ---|---|--- 2026-07-11 17:08:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5o6os3s2j...

CVE-2026-61870

creationtimestamp| type| source ---|---|--- 2026-07-11 15:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeyuxuuok2l...

CVE-2026-56763

creationtimestamp| type| source ---|---|--- 2026-07-11 14:43:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevjxoudi2f 2026-07-11 16:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqezy366wt2e...

CVE-2026-56240

creationtimestamp| type| source ---|---|--- 2026-07-11 14:39:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeve5iuvl2x 2026-07-12 11:39:49+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqh3qwdo2326...

CVE-2026-61428

creationtimestamp| type| source ---|---|--- 2026-07-11 14:35:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev3wf3rx2a 2026-07-11 16:17:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2swit5a26...

Information Exposure

Overview praisonai is a PraisonAI TypeScript AI Agents Framework - Node.js, npm, and Javascript AI Agents Framework Affected versions of this package are vulnerable to Information Exposure due to insecure default configuration that binds to all interfaces without requiring an API key and allows...

CVE-2026-61426

PrasionAI prior to 1.7.3 uses insecure defaults: it binds to all interfaces with no API key and permissive CORS, allowing unauthenticated access. Attacks can read agent instructions/system prompts via GET /api/agents or invoke /api/chat via POST without auth. No explicit remediation details are p...

CVE-2026-55233

creationtimestamp| type| source ---|---|--- 2026-07-11 12:04:31+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqemoht72p2e 2026-07-11 13:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqepthopzy2l 2026-07-14 04:15:20+00:00| seen|...

CVE-2026-6801

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5nejffn2e 2026-07-11 08:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe76hgzi22x...

CVE-2026-12994

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5mu6ovp22 2026-07-11 08:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe7p3g33o2w...

CVE-2026-12126

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5iicmjk2s 2026-07-11 07:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe6mfirdo2g...

CVE-2026-11901

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5idvtt32a...

CVE-2026-11898

creationtimestamp| type| source ---|---|--- 2026-07-11 07:30:49+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqe5f2ulhx2s 2026-07-11 07:32:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5i3a4zn27 2026-07-11 07:34:08+00:00| seen|...

CVE-2026-40639

creationtimestamp| type| source ---|---|--- 2026-07-11 06:22:17+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k 2026-07-11 17:39:31+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u 2026-07-12 14:01:19+00:00| seen|...

CVE-2026-7559

creationtimestamp| type| source ---|---|--- 2026-07-11 05:38:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdx3onwyn27...

CVE-2026-12141

creationtimestamp| type| source ---|---|--- 2026-07-11 05:38:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdx3ffc4w2d 2026-07-13 23:50:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkv2w26tc2i 2026-07-16 08:13:09+00:00| seen|...

CVE-2025-13968

creationtimestamp| type| source ---|---|--- 2026-07-11 05:36:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwypr5sv2z 2026-07-14 00:04:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkvt3q5sg2a...

EUVD-2026-43151

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-12738

CVE-2026-12738 affects WP Easy Pay

CVE-2026-6801 Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...